2026 CVE Vulnerabilities
60,151 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-41566 | CRITICAL | 9.4 | 0.3% | Jun 25, 2026 | Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks. This issue affects Apache ... |
| CVE-2026-56129 | MEDIUM | 6.8 | 0.1% | Jun 25, 2026 | Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insuf... |
| CVE-2026-12937 | HIGH | 7.5 | 0.3% | Jun 25, 2026 | The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable ... |
| CVE-2026-9702 | HIGH | 7.5 | 0.2% | Jun 25, 2026 | The InPost PL WordPress plugin before 1.9.1 does not verify that the request originates from the legitimate buyer before... |
| CVE-2026-5305 | HIGH | 8.8 | 0.3% | Jun 25, 2026 | The Email Address Encoder WordPress plugin before 1.0.25, email-encoder-premium WordPress plugin before 0.3.12 does not ... |
| CVE-2026-12490 | HIGH | 7.5 | 0.1% | Jun 25, 2026 | When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate ... |
| CVE-2026-12246 | HIGH | 8.1 | 0.3% | Jun 25, 2026 | NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the ad... |
| CVE-2026-12245 | HIGH | 7.5 | 0.3% | Jun 25, 2026 | NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the serve... |
| CVE-2026-12244 | HIGH | 8.8 | 0.3% | Jun 25, 2026 | If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS messa... |
| CVE-2026-10824 | MEDIUM | 6.5 | 0.2% | Jun 25, 2026 | The Masteriyo LMS WordPress plugin before 2.2.1 does not perform authorization checks in a course-progress REST API con... |
| CVE-2026-8330 | MEDIUM | 4.4 | 0.1% | Jun 25, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.11.6, 19.0 before 19.0.3, and 1... |
| CVE-2026-5952 | MEDIUM | 4.3 | 0.2% | Jun 25, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 18.11.6, 19.0 before 19.0.3, and... |
| CVE-2026-5796 | MEDIUM | 4.3 | 0.2% | Jun 25, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.6 before 18.11.6, 19.0 before 19.0.3, and ... |
| CVE-2026-5309 | MEDIUM | 5.4 | 0.2% | Jun 25, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.... |
| CVE-2026-3176 | LOW | 3.1 | 0.2% | Jun 25, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.... |
| CVE-2026-2238 | MEDIUM | 5.3 | 0.2% | Jun 25, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.11.6, 19.0 before 19.0.3, and ... |
| CVE-2026-1606 | MEDIUM | 4.3 | 0.2% | Jun 25, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.8 before 18.11.6, 19.0 before 19.0.3, and ... |
| CVE-2026-13311 | HIGH | 8.7 | 0.4% | Jun 25, 2026 | shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat as a reduce accumulator, whic... |
| CVE-2026-12635 | LOW | 3.1 | 0.2% | Jun 25, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.11.6, 19.0 before 19.0.3, and 1... |
| CVE-2026-12053 | HIGH | 7.5 | 0.3% | Jun 25, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions... |
| CVE-2026-11379 | MEDIUM | 5.3 | 0.2% | Jun 25, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, an... |
| CVE-2026-10712 | MEDIUM | 6.1 | 0.3% | Jun 25, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.11.6, 19.0 before 19.0.3, and... |
| CVE-2026-10086 | MEDIUM | 5.4 | 0.3% | Jun 25, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.... |
| CVE-2026-0934 | LOW | 3.8 | 0.2% | Jun 25, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 18.11.6, 19.0 before 19.0.3, and 19.... |
| CVE-2026-2508 | MEDIUM | 6.5 | 0.2% | Jun 25, 2026 | The Gravity Forms Booking plugin for WordPress is vulnerable to time-based SQL Injection via the ‘staff_id’ parameter in... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now