2026 CVE Vulnerabilities
64,909 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-87046 | MEDIUM | 4.3 | 0.2% | Sep 9, 2026 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87037 | MEDIUM | 5.4 | 0.1% | Sep 9, 2026 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87035 | MEDIUM | 4.3 | 0.2% | Sep 9, 2026 | Tanium addressed an information disclosure vulnerability in Comply. |
| CVE-2026-87033 | MEDIUM | 5.4 | 0.2% | Sep 9, 2026 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87032 | MEDIUM | 4.3 | 0.2% | Sep 9, 2026 | Tanium addressed an information disclosure vulnerability in Tanium Server. |
| CVE-2026-87025 | MEDIUM | 5.4 | 0.2% | Sep 9, 2026 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-87019 | MEDIUM | 4.3 | 0.2% | Sep 9, 2026 | Tanium addressed an improper access controls vulnerability in Comply. |
| CVE-2026-14892 | MEDIUM | 4.3 | 0.2% | Sep 9, 2026 | Tanium addressed an improper access controls vulnerability in Tanium Server. |
| CVE-2026-14505 | MEDIUM | 6.6 | 0.3% | Sep 9, 2026 | Tanium addressed a path traversal vulnerability in Tanium Data Service. |
| CVE-2026-13709 | MEDIUM | 6.4 | 0.2% | Sep 9, 2026 | The Graphina – Charts and Graphs For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'iq... |
| CVE-2026-12956 | MEDIUM | 5.3 | 0.2% | Sep 9, 2026 | The WP Event Solution (Eventin) plugin for WordPress is vulnerable to Missing Authorization in versions up to, and inclu... |
| CVE-2026-87724 | MEDIUM | 6.5 | 0.3% | Sep 9, 2026 | Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attacker... |
| CVE-2026-87083 | MEDIUM | 5.5 | 0.2% | Sep 9, 2026 | A weakness has been identified in tile-ai tilelang up to 0.1.14. This impacts the function KernelCache._load_kernel_from... |
| CVE-2026-87658 | MEDIUM | 4.3 | 0.2% | Sep 9, 2026 | Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engin... |
| CVE-2026-87656 | MEDIUM | 5.4 | 0.2% | Sep 9, 2026 | Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass sy... |
| CVE-2026-87655 | MEDIUM | 5.4 | 0.2% | Sep 9, 2026 | Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineerin... |
| CVE-2026-87653 | MEDIUM | 5.4 | 0.2% | Sep 9, 2026 | UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to sp... |
| CVE-2026-87651 | MEDIUM | 4.3 | 0.2% | Sep 9, 2026 | Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origi... |
| CVE-2026-87649 | MEDIUM | 5.4 | 0.2% | Sep 9, 2026 | UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social en... |
| CVE-2026-87645 | MEDIUM | 5.4 | 0.2% | Sep 9, 2026 | Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass sy... |
| CVE-2026-87642 | MEDIUM | 4.3 | 0.3% | Sep 9, 2026 | Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin d... |
| CVE-2026-87641 | MEDIUM | 4.2 | 0.2% | Sep 9, 2026 | Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access rest... |
| CVE-2026-87640 | MEDIUM | 6.1 | 0.2% | Sep 9, 2026 | Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had co... |
| CVE-2026-87635 | MEDIUM | 5.4 | 0.3% | Sep 9, 2026 | UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements ... |
| CVE-2026-87632 | MEDIUM | 4.3 | 0.3% | Sep 9, 2026 | Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web ori... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now