2026 CVE Vulnerabilities
66,348 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-94606 | HIGH | 8.9 | — | Sep 24, 2026 | authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik email authenticator ... |
| CVE-2026-94604 | — | — | — | Sep 24, 2026 | Rejected reason: This CVE is a duplicate of another CVE. |
| CVE-2026-94281 | MEDIUM | 6.5 | — | Sep 24, 2026 | An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X se... |
| CVE-2026-93830 | HIGH | 7.5 | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX int... |
| CVE-2026-93829 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd thread creation Th... |
| CVE-2026-93828 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfat_crea... |
| CVE-2026-93827 | HIGH | 8.4 | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setup ... |
| CVE-2026-93826 | HIGH | 7.5 | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: HID: hidpp: fix potential UAF in hidpp_connect_even... |
| CVE-2026-93825 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi_get_device_id() in spi_... |
| CVE-2026-93824 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: tls: reject the combination of TLS and sockmap TLS... |
| CVE-2026-93823 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFD... |
| CVE-2026-93822 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: PCI: iproc: Protect root bus removal with rescan lo... |
| CVE-2026-93821 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Protect root bus removal with rescan l... |
| CVE-2026-93820 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan... |
| CVE-2026-93819 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Protect root bus removal with rescan... |
| CVE-2026-93818 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan loc... |
| CVE-2026-93817 | HIGH | 7.8 | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix addr_filter_ranges lifetime Lee Jia Jie ... |
| CVE-2026-93816 | HIGH | 7.1 | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry name lengths before co... |
| CVE-2026-93815 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: au1000: move free_irq out of the close-time sp... |
| CVE-2026-93814 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controll... |
| CVE-2026-93813 | HIGH | 7.8 | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate INODE_REF's namelen ... |
| CVE-2026-93812 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set... |
| CVE-2026-93811 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix acl.sd_buf memory leak and invalid sd_si... |
| CVE-2026-93810 | HIGH | 7 | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput Fix a double fput() in... |
| CVE-2026-93809 | — | — | — | Sep 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module u... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now