2026 CVE Vulnerabilities

57,119 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-8079HIGH7.3In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged...
CVE-2026-56842HIGH7.5A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulne...
CVE-2026-56841HIGH8.8A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerabili...
CVE-2026-56004CRITICAL10A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by ...
CVE-2026-55119HIGH8.1A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability f...
CVE-2026-55118HIGH8.3A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Acces...
CVE-2026-55117HIGH8.6A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Applicat...
CVE-2026-55116CRITICAL9.8A malicious actor with access to the network and under certain network configurations could exploit an Improper Access C...
CVE-2026-55115CRITICAL9.9A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in Un...
CVE-2026-55114HIGH8.8A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability f...
CVE-2026-55113HIGH7.5A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in U...
CVE-2026-55112HIGH8.8A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper A...
CVE-2026-55111HIGH7.5A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodli...
CVE-2026-55110MEDIUM6.1A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (COR...
CVE-2026-54409HIGH8.1A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulne...
CVE-2026-54408CRITICAL9.8A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prote...
CVE-2026-54407HIGH8.6A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prote...
CVE-2026-54406HIGH8.7A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in s...
CVE-2026-54405HIGH7.5A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Net...
CVE-2026-54404HIGH8.8A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vu...
CVE-2026-54403HIGH8.6A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices runni...
CVE-2026-54402HIGH8.8A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability...
CVE-2026-54401HIGH8.8A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to es...
CVE-2026-54400CRITICAL9.1A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability ...
CVE-2026-53358HIGH8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use chan timer to close channels ...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now