2026 CVE Vulnerabilities
61,767 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-10885 | HIGH | 8.8 | 0.4% | Jun 4, 2026 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arb... |
| CVE-2026-10884 | HIGH | 8.3 | 0.3% | Jun 4, 2026 | Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the r... |
| CVE-2026-10883 | HIGH | 8.8 | 0.4% | Jun 4, 2026 | Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap co... |
| CVE-2026-10882 | HIGH | 8.8 | 0.5% | Jun 4, 2026 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code vi... |
| CVE-2026-10881 | CRITICAL | 9.6 | 0.4% | Jun 4, 2026 | Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially p... |
| CVE-2026-10875 | MEDIUM | 6.3 | 0.3% | Jun 4, 2026 | A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unk... |
| CVE-2026-10874 | MEDIUM | 6.3 | 0.3% | Jun 4, 2026 | A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown ... |
| CVE-2026-10873 | HIGH | 7.3 | 2.7% | Jun 4, 2026 | A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats ... |
| CVE-2026-10872 | HIGH | 7.3 | 2.6% | Jun 4, 2026 | A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/... |
| CVE-2026-42547 | MEDIUM | 5.4 | 0.2% | Jun 4, 2026 | IRIS is a web collaborative platform that helps incident responders share technical details during investigations. In ve... |
| CVE-2026-42543 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versi... |
| CVE-2026-42540 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versi... |
| CVE-2026-42539 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versi... |
| CVE-2026-11322 | HIGH | 7.1 | 0.3% | Jun 4, 2026 | Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace bo... |
| CVE-2026-10871 | HIGH | 7.3 | 2.2% | Jun 4, 2026 | A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of t... |
| CVE-2026-5066 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | A potential out-of-bounds write/read exists in the TLS socket connect path of the network sockets subsystem (subsys/net/... |
| CVE-2026-42538 | MEDIUM | 6.3 | 0.2% | Jun 4, 2026 | IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versi... |
| CVE-2026-42329 | MEDIUM | 4.7 | 0.2% | Jun 4, 2026 | Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versi... |
| CVE-2026-10870 | HIGH | 7.3 | 2.2% | Jun 4, 2026 | A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the comp... |
| CVE-2026-5589 | MEDIUM | 6.3 | 0.2% | Jun 4, 2026 | An integer underflow in bt_mesh_sol_recv() in the Bluetooth Mesh solicitation handling (subsys/bluetooth/mesh/solicitati... |
| CVE-2026-41522 | HIGH | 7.1 | 0.2% | Jun 4, 2026 | Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior... |
| CVE-2026-41518 | HIGH | 7.6 | 0.2% | Jun 4, 2026 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c... |
| CVE-2026-41249 | HIGH | 8.2 | 0.4% | Jun 4, 2026 | CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow ... |
| CVE-2026-21404 | MEDIUM | 6.3 | 0.1% | Jun 4, 2026 | NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOA... |
| CVE-2026-48480 | MEDIUM | 6.6 | 0.2% | Jun 4, 2026 | The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.22.FInal, the codec-ohttp im... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now