2026 CVE Vulnerabilities
44,078 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-48078 | MEDIUM | 5.3 | 0.3% | Aug 6, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver... |
| CVE-2026-48077 | MEDIUM | 5.3 | 0.3% | Aug 6, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver... |
| CVE-2026-48076 | MEDIUM | 6.5 | 0.2% | Aug 6, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. The new-clie... |
| CVE-2026-48075 | MEDIUM | 6.5 | 0.4% | Aug 6, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver... |
| CVE-2026-48074 | LOW | 2.7 | 0.3% | Aug 6, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver... |
| CVE-2026-48071 | MEDIUM | 5.8 | 0.4% | Aug 6, 2026 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to ver... |
| CVE-2026-48054 | HIGH | 8.8 | 0.5% | Aug 6, 2026 | OpenZeppelin Contracts Wizardis a web application to interactively build a contract out of components from OpenZeppelin ... |
| CVE-2026-47765 | HIGH | 7.1 | 0.4% | Aug 6, 2026 | Frappe is a full-stack web application framework. Prior to 15.110.0 and 16.20.0, the restore and bulk_restore endpoints ... |
| CVE-2026-47194 | HIGH | 8.6 | 0.2% | Aug 6, 2026 | Frappe is a full-stack web application framework. Prior to 15.108.0 and 16.18.3, temporary magic login link generation c... |
| CVE-2026-47185 | MEDIUM | 5.1 | 0.4% | Aug 6, 2026 | Frappe is a full-stack web application framework. Prior to 16.18.0, the Workspace Save API accepts a controlled workspac... |
| CVE-2026-45573 | MEDIUM | 6.4 | 0.3% | Aug 6, 2026 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.3... |
| CVE-2026-45572 | MEDIUM | 4.8 | 0.2% | Aug 6, 2026 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.3... |
| CVE-2026-45415 | MEDIUM | 6 | 0.4% | Aug 6, 2026 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.3... |
| CVE-2026-45414 | HIGH | 8.5 | 0.3% | Aug 6, 2026 | Decidim is a participatory democracy framework. Prior to 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, JWT-backed API auth... |
| CVE-2026-45378 | HIGH | 7.5 | 0.3% | Aug 6, 2026 | Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.3... |
| CVE-2026-43632 | CRITICAL | 9.2 | 0.3% | Aug 6, 2026 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six to... |
| CVE-2026-43631 | CRITICAL | 9.2 | 0.4% | Aug 6, 2026 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-se... |
| CVE-2026-43630 | MEDIUM | 6.5 | 0.4% | Aug 6, 2026 | llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore p... |
| CVE-2026-43629 | CRITICAL | 9.2 | 0.5% | Aug 6, 2026 | llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path whe... |
| CVE-2026-43628 | HIGH | 8.5 | 0.2% | Aug 6, 2026 | llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sample... |
| CVE-2026-43627 | HIGH | 8.5 | 0.1% | Aug 6, 2026 | llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where ... |
| CVE-2026-41861 | MEDIUM | 4.2 | — | Aug 6, 2026 | Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file with ... |
| CVE-2026-3418 | CRITICAL | 9.1 | 0.5% | Aug 6, 2026 | The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or desti... |
| CVE-2026-3415 | HIGH | 8.7 | 0.3% | Aug 6, 2026 | The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of validatio... |
| CVE-2026-33181 | — | — | — | Aug 6, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-33942. Reason: This candidate is a ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now