2026 CVE Vulnerabilities
60,112 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-56876 | HIGH | 8.6 | 0.3% | Jun 26, 2026 | extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file contain... |
| CVE-2026-55448 | MEDIUM | 6.3 | — | Jun 26, 2026 | mise manages dev tools like node, python, cmake, and terraform. From 2026.3.15 until 2026.6.4, mise loads github.credent... |
| CVE-2026-55441 | HIGH | 8.6 | — | Jun 26, 2026 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config fil... |
| CVE-2026-54557 | MEDIUM | 5.5 | — | Jun 26, 2026 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.1, the mise HTTP backend builds its inst... |
| CVE-2026-54341 | HIGH | 7.5 | — | Jun 26, 2026 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload ... |
| CVE-2026-48743 | HIGH | 7.5 | 0.3% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3,... |
| CVE-2026-48706 | HIGH | 7.5 | 0.6% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9... |
| CVE-2026-48497 | HIGH | 7.5 | 0.4% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3,... |
| CVE-2026-48044 | HIGH | 7.5 | 0.5% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.23.0 until 1.35.11, 1.36.7... |
| CVE-2026-48042 | HIGH | 7.5 | 0.5% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3,... |
| CVE-2026-47778 | MEDIUM | 4.4 | 0.2% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3,... |
| CVE-2026-47775 | MEDIUM | 6.8 | 0.2% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3,... |
| CVE-2026-47692 | MEDIUM | 4.3 | 0.2% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9... |
| CVE-2026-47221 | HIGH | 7.5 | 0.4% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9... |
| CVE-2026-47207 | MEDIUM | 6.5 | 0.4% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9... |
| CVE-2026-47206 | LOW | 2.3 | — | Jun 26, 2026 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.9, Dragonfly has a RESP Proto... |
| CVE-2026-47204 | HIGH | 7.5 | 0.4% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9... |
| CVE-2026-33646 | CRITICAL | 9.6 | 0.7% | Jun 26, 2026 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files ... |
| CVE-2026-57518 | HIGH | 8.8 | 0.5% | Jun 26, 2026 | Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage ... |
| CVE-2026-57231 | HIGH | 7.5 | 0.3% | Jun 26, 2026 | Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environ... |
| CVE-2026-56823 | MEDIUM | 5.4 | — | Jun 26, 2026 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent... |
| CVE-2026-56663 | HIGH | 8.5 | — | Jun 26, 2026 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent... |
| CVE-2026-55686 | MEDIUM | 5.3 | — | Jun 26, 2026 | Podman is a tool for managing OCI containers and pods. From 3.0.0 until 5.7.1, running a malicious container image where... |
| CVE-2026-55677 | HIGH | 7.5 | — | Jun 26, 2026 | Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decodi... |
| CVE-2026-54636 | CRITICAL | 9.9 | 0.3% | Jun 26, 2026 | Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json file to manage system... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now