2026 CVE Vulnerabilities
59,915 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-13583 | HIGH | 8.8 | 0.4% | Jun 29, 2026 | A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the function formUSBFolder of the file /goform/for... |
| CVE-2026-13582 | HIGH | 8.8 | — | Jun 29, 2026 | A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/form... |
| CVE-2026-13581 | MEDIUM | 6.3 | 1.2% | Jun 29, 2026 | A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function formStaDrvSetup of the f... |
| CVE-2026-13580 | HIGH | 8.8 | — | Jun 29, 2026 | A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affects the function formQoS of the file /gof... |
| CVE-2026-13437 | MEDIUM | 6.5 | 0.3% | Jun 29, 2026 | Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 a... |
| CVE-2026-57525 | — | — | — | Jun 29, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-57523 | — | — | — | Jun 29, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-57341 | MEDIUM | 6.5 | 0.3% | Jun 29, 2026 | Unauthenticated Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce ... |
| CVE-2026-57340 | MEDIUM | 6.5 | — | Jun 29, 2026 | Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions. |
| CVE-2026-57339 | MEDIUM | 6.5 | — | Jun 29, 2026 | Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions. |
| CVE-2026-57338 | HIGH | 7.1 | — | Jun 29, 2026 | Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. |
| CVE-2026-57337 | HIGH | 7.1 | — | Jun 29, 2026 | Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions. |
| CVE-2026-57336 | HIGH | 7.1 | — | Jun 29, 2026 | Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions. |
| CVE-2026-57335 | MEDIUM | 6.5 | 0.2% | Jun 29, 2026 | Subscriber Broken Access Control in Ads by WPQuads <= 3.0.3 versions. |
| CVE-2026-57334 | MEDIUM | 6.5 | — | Jun 29, 2026 | Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions. |
| CVE-2026-57333 | HIGH | 7.1 | — | Jun 29, 2026 | Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions. |
| CVE-2026-57332 | HIGH | 7.1 | — | Jun 29, 2026 | Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions. |
| CVE-2026-57331 | CRITICAL | 9.9 | — | Jun 29, 2026 | Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions. |
| CVE-2026-57330 | MEDIUM | 6.5 | — | Jun 29, 2026 | Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions. |
| CVE-2026-57329 | MEDIUM | 6.5 | 0.2% | Jun 29, 2026 | Subscriber Cross Site Scripting (XSS) in WooCommerce Designer Pro <= 1.9.34 versions. |
| CVE-2026-57328 | MEDIUM | 6.5 | — | Jun 29, 2026 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. |
| CVE-2026-57327 | MEDIUM | 6.3 | — | Jun 29, 2026 | Subscriber Broken Access Control in MainWP <= 6.1.1 versions. |
| CVE-2026-57326 | MEDIUM | 6.1 | — | Jun 29, 2026 | Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. |
| CVE-2026-57320 | HIGH | 7.1 | — | Jun 29, 2026 | Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions. |
| CVE-2026-56290 | CRITICAL | 9.8 | 18.7% | Jun 29, 2026 | Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now