2026 CVE Vulnerabilities
61,264 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-12200 | HIGH | 7.3 | 0.3% | Jun 15, 2026 | A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. This impacts an unknown functi... |
| CVE-2026-12198 | HIGH | 7.3 | 0.5% | Jun 15, 2026 | A weakness has been identified in Microweber up to 2.0.20. This affects the function userfiles_path of the file /api_nos... |
| CVE-2026-12197 | HIGH | 7.3 | 2.4% | Jun 15, 2026 | A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element is the function nslookup of the file ... |
| CVE-2026-12193 | HIGH | 7.8 | 0.1% | Jun 15, 2026 | A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtl_Handle... |
| CVE-2026-12192 | HIGH | 8.8 | 0.3% | Jun 15, 2026 | A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the component Web Server. This ma... |
| CVE-2026-12191 | HIGH | 7.8 | 0.1% | Jun 14, 2026 | A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the fi... |
| CVE-2026-12190 | MEDIUM | 5.3 | 0.1% | Jun 14, 2026 | A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of... |
| CVE-2026-12189 | MEDIUM | 5.3 | 0.1% | Jun 14, 2026 | A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component ... |
| CVE-2026-12188 | MEDIUM | 6.3 | 0.2% | Jun 14, 2026 | A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the fi... |
| CVE-2026-12187 | HIGH | 8.8 | 1.9% | Jun 14, 2026 | A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknow... |
| CVE-2026-12186 | HIGH | 8.8 | 2.0% | Jun 14, 2026 | A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replace_country in the library... |
| CVE-2026-54413 | HIGH | 8.2 | 0.5% | Jun 14, 2026 | driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_Se... |
| CVE-2026-54412 | HIGH | 8.2 | 0.4% | Jun 14, 2026 | LiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer underflow in the mqtt_unpac... |
| CVE-2026-54411 | MEDIUM | 6.9 | 0.3% | Jun 14, 2026 | Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-passwor... |
| CVE-2026-54410 | HIGH | 8.6 | 0.5% | Jun 14, 2026 | nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header function of the Modbus/TCP serv... |
| CVE-2026-11527 | HIGH | 8.6 | 0.6% | Jun 14, 2026 | Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of t... |
| CVE-2026-11526 | CRITICAL | 9.8 | 1.4% | Jun 14, 2026 | GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments ... |
| CVE-2026-54421 | MEDIUM | 6.8 | 0.3% | Jun 14, 2026 | In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized fo... |
| CVE-2026-54420 | HIGH | 8.5 | 1.3% | Jun 14, 2026 | LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provide... |
| CVE-2026-12176 | MEDIUM | 4.3 | 0.3% | Jun 14, 2026 | A vulnerability has been found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The impa... |
| CVE-2026-12175 | MEDIUM | 4.7 | 0.2% | Jun 13, 2026 | A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of t... |
| CVE-2026-12174 | HIGH | 8.8 | 0.6% | Jun 13, 2026 | A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the f... |
| CVE-2026-12183 | CRITICAL | 9.8 | 0.5% | Jun 13, 2026 | Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentic... |
| CVE-2026-6428 | HIGH | 7.6 | 0.2% | Jun 13, 2026 | SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x b... |
| CVE-2026-5513 | HIGH | 7.2 | 0.3% | Jun 13, 2026 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now