2026 CVE Vulnerabilities

43,882 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-12372LOW3.7A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. Th...
CVE-2026-19370MEDIUM5.3A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSyn...
CVE-2026-19369MEDIUM5.3A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index....
CVE-2026-19368MEDIUM4.8A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some unknown functionality of the fil...
CVE-2026-19367MEDIUM6.3A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functional...
CVE-2026-70395LOW2.1Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to f...
CVE-2026-19366MEDIUM5.3A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/inse...
CVE-2026-19365MEDIUM5.3A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the fil...
CVE-2026-69659MEDIUM5.9Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node ...
CVE-2026-19364MEDIUM6.3A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown functi...
CVE-2026-19363MEDIUM5.5A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handl...
CVE-2026-19362MEDIUM5.5A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parse_token_from_heade...
CVE-2026-19361LOW3.7A flaw has been found in macrozheng mall 0504e86. This vulnerability affects unknown code of the file /sso/getAuthCode o...
CVE-2026-15534MEDIUM5.7Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersiz...
CVE-2026-19360MEDIUM5.1A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects the function ExcelLexBotS3TriggerFunctio...
CVE-2026-19359MEDIUM5.1A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function ...
CVE-2026-19358MEDIUM6.3A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultF...
CVE-2026-19357MEDIUM5.5A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown function of the file /mdiy/form...
CVE-2026-19356MEDIUM5.5A vulnerability was identified in MingSoft MCMS up to 3.0.6. This impacts an unknown function of the file /mdiy/form/dat...
CVE-2026-19355HIGH7.3A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function ModelDataImpl.queryDiyFormData of...
CVE-2026-19354MEDIUM6.3A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted element is an u...
CVE-2026-19353MEDIUM5A vulnerability has been found in DedeCMS up to 5.7.118 UTF8SP2. The affected element is the function _4_Setup of the fi...
CVE-2026-19352LOW3.1A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality o...
CVE-2026-19351HIGH7.3A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the ...
CVE-2026-19350MEDIUM6.3A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/in...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now