2026 CVE Vulnerabilities
44,805 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16331 | HIGH | 7.3 | 0.7% | Jul 21, 2026 | A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/fu... |
| CVE-2026-16330 | HIGH | 7.3 | 0.7% | Jul 21, 2026 | A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jqu... |
| CVE-2026-16329 | HIGH | 7.3 | 0.5% | Jul 21, 2026 | A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photo_center/php/up... |
| CVE-2026-63728 | HIGH | 8.1 | 0.1% | Jul 21, 2026 | Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence r... |
| CVE-2026-55833 | HIGH | 7.5 | 0.6% | Jul 21, 2026 | Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2... |
| CVE-2026-55831 | HIGH | 7.5 | 0.7% | Jul 21, 2026 | Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2... |
| CVE-2026-16327 | HIGH | 7.3 | 0.7% | Jul 21, 2026 | A vulnerability was determined in D-Link DNS-320 1.0.2. This issue affects some unknown processing of the file /web/web_... |
| CVE-2026-15905 | HIGH | 7.8 | 0.1% | Jul 20, 2026 | Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap cor... |
| CVE-2026-15904 | HIGH | 8.8 | 0.3% | Jul 20, 2026 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user... |
| CVE-2026-15903 | HIGH | 8.8 | 0.3% | Jul 20, 2026 | Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitra... |
| CVE-2026-15902 | HIGH | 8.8 | 0.3% | Jul 20, 2026 | Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code insi... |
| CVE-2026-64624 | HIGH | 8.5 | 0.2% | Jul 20, 2026 | FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the e... |
| CVE-2026-57495 | HIGH | 8.2 | 0.3% | Jul 20, 2026 | AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39, ... |
| CVE-2026-57494 | HIGH | 7.1 | 0.2% | Jul 20, 2026 | AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-p... |
| CVE-2026-55550 | HIGH | 7.1 | 0.2% | Jul 20, 2026 | NextCRM is open-source customer relationship management (CRM) software. The CRM product catalog is an organization-wide ... |
| CVE-2026-55544 | HIGH | 7.6 | 0.2% | Jul 20, 2026 | NextCRM is open-source customer relationship management (CRM) software. In version 0.12.1, the MCP campaign tools expose... |
| CVE-2026-51031 | HIGH | 7.5 | 0.2% | Jul 20, 2026 | FlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint. T... |
| CVE-2026-47255 | HIGH | 8.2 | 0.2% | Jul 20, 2026 | AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenti... |
| CVE-2026-16324 | HIGH | 7.3 | 0.3% | Jul 20, 2026 | A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. The impacted element is an unknown function ... |
| CVE-2026-56624 | HIGH | 7.3 | 0.2% | Jul 20, 2026 | Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side an... |
| CVE-2026-56623 | HIGH | 7.1 | 0.3% | Jul 20, 2026 | Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and... |
| CVE-2026-56452 | HIGH | 7.5 | 0.4% | Jul 20, 2026 | Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and ser... |
| CVE-2026-47198 | HIGH | 8.5 | 0.4% | Jul 20, 2026 | Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.1, the... |
| CVE-2026-47130 | HIGH | 7.1 | 0.2% | Jul 20, 2026 | NextCRM is open-source customer relationship management (CRM) software. Versions prior to 0.12.0 have a Broken Object Le... |
| CVE-2026-47129 | HIGH | 8.1 | 0.2% | Jul 20, 2026 | NextCRM is open-source customer relationship management (CRM) software. Versions prior to 0.12.0 have a Broken Access Co... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now