2026 CVE Vulnerabilities
59,849 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-44949 | HIGH | 7 | 0.2% | Jun 30, 2026 | A Rancher FleetWorkspace admission path allowed side effects to occur in the Rancher webhook handler for versions 0.7.0... |
| CVE-2026-44947 | MEDIUM | 6.9 | 0.2% | Jun 30, 2026 | A missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher versions 2.13.0 up to 2.13.... |
| CVE-2026-27957 | HIGH | 8.8 | — | Jun 30, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.... |
| CVE-2026-27956 | MEDIUM | 4.3 | — | Jun 30, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.... |
| CVE-2026-27955 | MEDIUM | 6.6 | — | Jun 30, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.... |
| CVE-2026-27883 | MEDIUM | 5 | 0.2% | Jun 30, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.... |
| CVE-2026-27882 | MEDIUM | 4.8 | — | Jun 30, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.... |
| CVE-2026-27881 | MEDIUM | 5 | — | Jun 30, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.... |
| CVE-2026-35098 | MEDIUM | 6.9 | — | Jun 30, 2026 | KTM System e-BOK does not implement any limit or timeout on consecutive login attempts, allowing an attacker to perform ... |
| CVE-2026-35097 | MEDIUM | 6.9 | — | Jun 30, 2026 | KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic,... |
| CVE-2026-35096 | MEDIUM | 5.1 | — | Jun 30, 2026 | KTM System e-BOK is vulnerable to Cross‑Site Request Forgery (CSRF) in both the email-change and password-change functio... |
| CVE-2026-35095 | MEDIUM | 4.8 | — | Jun 30, 2026 | KTM System e-BOK allows the session identifier to be set by the client prior to authentication. If a cookie with a valid... |
| CVE-2026-14241 | CRITICAL | 9.8 | 0.3% | Jun 30, 2026 | Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume th... |
| CVE-2026-14178 | MEDIUM | 5.9 | — | Jun 30, 2026 | openGauss 在处理带 NLS 参数的 to_timestamp 调用时，to_timestamp_with_fmt_nls() 会将 nls_fmt_str 保存到 u_sess->parser_cxt.nls_fmt_str。在 ... |
| CVE-2026-8655 | CRITICAL | 9.8 | 0.4% | Jun 30, 2026 | Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous be... |
| CVE-2026-8452 | CRITICAL | 9.8 | 1.0% | Jun 30, 2026 | Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Den... |
| CVE-2026-8451 | HIGH | 7.5 | 0.5% | Jun 30, 2026 | Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetS... |
| CVE-2026-8403 | MEDIUM | 6.1 | — | Jun 30, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Eksagate Electroni... |
| CVE-2026-6556 | CRITICAL | 9.1 | 0.3% | Jun 30, 2026 | @fastify/express versions 4.0.6 and earlier only rewrite the plugin prefix for middleware mount paths when the path argu... |
| CVE-2026-58374 | HIGH | 7.1 | 0.3% | Jun 30, 2026 | In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) association... |
| CVE-2026-58116 | HIGH | 8.8 | 0.5% | Jun 30, 2026 | LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to ex... |
| CVE-2026-58016 | CRITICAL | 9.1 | 0.5% | Jun 30, 2026 | A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection... |
| CVE-2026-58015 | HIGH | 7.5 | 0.7% | Jun 30, 2026 | A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism doe... |
| CVE-2026-58014 | HIGH | 8.6 | 0.4% | Jun 30, 2026 | A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfil... |
| CVE-2026-58013 | HIGH | 8.2 | 0.5% | Jun 30, 2026 | A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now