2026 CVE Vulnerabilities

60,200 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-56117MEDIUM5.5dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handl...
CVE-2026-56116HIGH7.1dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in the IPv6 Router Advertisement ro...
CVE-2026-56115HIGH8.8Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to...
CVE-2026-56114MEDIUM6.5dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6_mak...
CVE-2026-56113MEDIUM6.5dhcpcd through 10.3.2, fixed in commit 5733d3c, contains a heap use-after-free vulnerability that allows unauthenticated...
CVE-2026-55450CRITICAL9.3Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can...
CVE-2026-55447CRITICAL9.6Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by controlling a files th...
CVE-2026-55446HIGH7.5Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an attacker can send a /...
CVE-2026-55423MEDIUM6.1Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does no...
CVE-2026-55255HIGH8.4Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object...
CVE-2026-54308HIGH7.2n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, the MicrosoftAgent365Trigger and StripeT...
CVE-2026-54307CRITICAL9.6n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with edit...
CVE-2026-54306MEDIUM6.4n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, a prototype pollution vulnerability allo...
CVE-2026-54305CRITICAL9.9n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by th...
CVE-2026-54304HIGH7.7n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, an authenticated user with pe...
CVE-2026-54302MEDIUM5.4n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with wo...
CVE-2026-54301MEDIUM5.4n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, an authenticated user with wo...
CVE-2026-50574CRITICAL9.6yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a ...
CVE-2026-50023CRITICAL9.6yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a rem...
CVE-2026-50019HIGH7.4yt-dlp is a command-line audio/video downloader. From 2023.09.24 until 2026.06.09, if curl is used as an external downlo...
CVE-2026-49465HIGH7.7n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with pe...
CVE-2026-49444HIGH8.5n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with pe...
CVE-2026-48520MEDIUM6.1Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playgroun...
CVE-2026-48519CRITICAL9.6Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground...
CVE-2026-45732HIGH8.1n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credent...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now