2026 CVE Vulnerabilities
57,105 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-14624 | MEDIUM | 4.3 | 0.3% | Jul 4, 2026 | A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1. Impacted is an unknown function of the file /go/sr... |
| CVE-2026-14623 | MEDIUM | 4.3 | 0.5% | Jul 4, 2026 | A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionRep... |
| CVE-2026-14622 | HIGH | 7.3 | 0.5% | Jul 4, 2026 | A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. Th... |
| CVE-2026-14621 | LOW | 3.1 | 0.3% | Jul 4, 2026 | A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.ini... |
| CVE-2026-14619 | MEDIUM | 6.3 | 0.2% | Jul 4, 2026 | A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionali... |
| CVE-2026-12194 | LOW | 2.3 | 0.4% | Jul 4, 2026 | PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to e... |
| CVE-2026-14618 | MEDIUM | 4.3 | 0.3% | Jul 4, 2026 | A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_d... |
| CVE-2026-12252 | HIGH | 7.8 | 0.1% | Jul 4, 2026 | In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, Stanford... |
| CVE-2026-54424 | HIGH | 8.4 | 0.2% | Jul 4, 2026 | An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Pri... |
| CVE-2026-58523 | MEDIUM | 6.5 | 0.5% | Jul 3, 2026 | Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over ... |
| CVE-2026-14617 | LOW | 3.1 | 0.2% | Jul 3, 2026 | A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function Gatewa... |
| CVE-2026-58597 | MEDIUM | 4.3 | 0.4% | Jul 3, 2026 | Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to pe... |
| CVE-2026-58524 | MEDIUM | 6.1 | 0.2% | Jul 3, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) ... |
| CVE-2026-58522 | MEDIUM | 6.8 | 0.3% | Jul 3, 2026 | Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. |
| CVE-2026-58426 | CRITICAL | 9.6 | 0.2% | Jul 3, 2026 | Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state w... |
| CVE-2026-58424 | HIGH | 8.9 | 0.2% | Jul 3, 2026 | Permanent Fork PR Workflow Approval Gate Bypass |
| CVE-2026-58423 | HIGH | 7.7 | 0.3% | Jul 3, 2026 | LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories |
| CVE-2026-58422 | CRITICAL | 9.8 | 0.2% | Jul 3, 2026 | Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts |
| CVE-2026-58421 | HIGH | 7.5 | 0.2% | Jul 3, 2026 | Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service |
| CVE-2026-58419 | HIGH | 7.5 | 0.2% | Jul 3, 2026 | Notification API leaks private issue metadata after access revocation |
| CVE-2026-58418 | MEDIUM | 6.5 | 0.2% | Jul 3, 2026 | SSRF via HTTP Redirect in Repository Migration |
| CVE-2026-58300 | MEDIUM | 6.2 | 0.4% | Jul 3, 2026 | Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. |
| CVE-2026-58299 | HIGH | 7.5 | 0.3% | Jul 3, 2026 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execu... |
| CVE-2026-58298 | MEDIUM | 6.1 | 0.2% | Jul 3, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) ... |
| CVE-2026-58297 | HIGH | 7.1 | 0.3% | Jul 3, 2026 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized a... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now