2026 CVE Vulnerabilities

57,056 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-11875MEDIUM5.3The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session co...
CVE-2026-11869MEDIUM5.3The WP DSGVO Tools (GDPR) WordPress plugin before 3.1.40 does not perform an authorization check on the immediate-proces...
CVE-2026-11571HIGH7.5The Everest Forms WordPress plugin before 3.5.0 does not reliably delete temporary CSV files generated during email-not...
CVE-2026-5523HIGH8.8The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1....
CVE-2026-41857HIGH7.8A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the ope...
CVE-2026-15138MEDIUM6.3A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function _validat...
CVE-2026-47646MEDIUM6.1Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allo...
CVE-2026-15137HIGH7.3A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code...
CVE-2026-15135HIGH7.3A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the f...
CVE-2026-15134HIGH7.3A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is...
CVE-2026-59723HIGH8.8Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. Prior to 3.0.30, the Cline Hub dashboard...
CVE-2026-54784HIGH7.4CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. In version 1.9.0, CoreWCF ...
CVE-2026-54783HIGH7.4CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54782CRITICAL10CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54781HIGH7.4CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54780LOW3.7CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54779MEDIUM5.9CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54778MEDIUM6.2CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54776MEDIUM4.4CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54775MEDIUM6.5CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54774HIGH7.4CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54773MEDIUM5.9CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54772HIGH7.5CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, ...
CVE-2026-54499HIGH7.5Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human language...
CVE-2026-15133HIGH8.8Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now