2026 CVE Vulnerabilities
43,946 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-64638 | HIGH | 8.9 | — | Aug 7, 2026 | WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malici... |
| CVE-2026-64637 | CRITICAL | 9.9 | — | Aug 7, 2026 | Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an ... |
| CVE-2026-64636 | HIGH | 7.7 | — | Aug 7, 2026 | An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to rea... |
| CVE-2026-56818 | MEDIUM | 6.5 | — | Aug 7, 2026 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the Redis... |
| CVE-2026-47364 | MEDIUM | 6.5 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datado... |
| CVE-2026-47363 | MEDIUM | 6.3 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts a... |
| CVE-2026-47362 | MEDIUM | 4.6 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive con... |
| CVE-2026-47361 | MEDIUM | 6.4 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission gu... |
| CVE-2026-44965 | MEDIUM | 5.5 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWid... |
| CVE-2026-44964 | MEDIUM | 6.5 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with... |
| CVE-2026-19229 | MEDIUM | 5.5 | 0.3% | Aug 7, 2026 | A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functiona... |
| CVE-2026-19213 | MEDIUM | 4.3 | 0.2% | Aug 7, 2026 | A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty in the library src/WtCo... |
| CVE-2026-19082 | HIGH | 7.5 | — | Aug 7, 2026 | Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count... |
| CVE-2026-71557 | MEDIUM | 6.3 | — | Aug 7, 2026 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference name... |
| CVE-2026-71556 | HIGH | 7.1 | — | Aug 7, 2026 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree opera... |
| CVE-2026-68772 | HIGH | 8.5 | — | Aug 7, 2026 | ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attacke... |
| CVE-2026-67585 | HIGH | 8.7 | 0.4% | Aug 7, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an unauthent... |
| CVE-2026-66062 | MEDIUM | 5.3 | — | Aug 7, 2026 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.70.2, the c... |
| CVE-2026-20348 | HIGH | 7.5 | 0.3% | Aug 7, 2026 | A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c... |
| CVE-2026-20347 | HIGH | 7.5 | 0.3% | Aug 7, 2026 | A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a Do... |
| CVE-2026-20346 | HIGH | 7.5 | 0.3% | Aug 7, 2026 | A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c... |
| CVE-2026-20345 | HIGH | 7.5 | 0.3% | Aug 7, 2026 | A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c... |
| CVE-2026-20339 | HIGH | 7.5 | 0.3% | Aug 7, 2026 | A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a Do... |
| CVE-2026-20338 | HIGH | 7.5 | 0.3% | Aug 7, 2026 | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi... |
| CVE-2026-20337 | HIGH | 7.5 | 0.4% | Aug 7, 2026 | A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now