2026 CVE Vulnerabilities
63,684 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-33462 | HIGH | 7.3 | 0.2% | May 28, 2026 | A path traversal vulnerability was identified in Kibana's dashboard management functionality. An authenticated user with... |
| CVE-2026-32847 | HIGH | 8.7 | 0.4% | May 28, 2026 | DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/mai... |
| CVE-2026-4944 | HIGH | 8.8 | 0.7% | May 28, 2026 | vllm-project/vllm version 0.14.1 contains a vulnerability where the `trust_remote_code=True` parameter is hardcoded in t... |
| CVE-2026-47337 | LOW | 3.3 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AF_INET... |
| CVE-2026-47336 | LOW | 3.3 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8 contains SAUCE patches with a possible use of an uninitialized variable in AppArmor AF_INET/AF_INET6 so... |
| CVE-2026-47335 | MEDIUM | 5.5 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8 contains SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notificatio... |
| CVE-2026-47334 | MEDIUM | 5.5 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in notifi... |
| CVE-2026-47333 | HIGH | 7.8 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an i... |
| CVE-2026-47332 | MEDIUM | 5.5 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structu... |
| CVE-2026-47331 | HIGH | 7.8 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. An unprivile... |
| CVE-2026-47330 | LOW | 3.3 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitializ... |
| CVE-2026-47329 | LOW | 3.3 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor n... |
| CVE-2026-47328 | MEDIUM | 6.1 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not ... |
| CVE-2026-47327 | LOW | 3.3 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AppArmo... |
| CVE-2026-47326 | MEDIUM | 5.5 | 0.1% | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor not... |
| CVE-2026-47136 | MEDIUM | 6.9 | 0.3% | May 28, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the RustFS console endpoint GET /rus... |
| CVE-2026-46685 | MEDIUM | 6 | 0.1% | May 28, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, when RUSTFS_CORS_ALLOWED_ORIGINS is ... |
| CVE-2026-46526 | MEDIUM | 5 | 0.2% | May 28, 2026 | Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.10, the URL checking ... |
| CVE-2026-46509 | HIGH | 8.2 | 0.3% | May 28, 2026 | deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, prototype pollution is possible when prope... |
| CVE-2026-45332 | HIGH | 7.5 | 0.3% | May 28, 2026 | Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 to 2.0.0-beta.27, a Broken Acce... |
| CVE-2026-45044 | HIGH | 8.8 | 0.3% | May 28, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the admin router explicitly whitelis... |
| CVE-2026-45042 | HIGH | 7.1 | 0.2% | May 28, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, improper authorization in the Upload... |
| CVE-2026-45041 | HIGH | 8.7 | 0.2% | May 28, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, crates/appauth/src/token.rs ships a ... |
| CVE-2026-45040 | MEDIUM | 5.3 | 0.2% | May 28, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, RustFS suffers from sensitive inform... |
| CVE-2026-45039 | CRITICAL | 9.8 | 0.3% | May 28, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the internode RPC layer authenticate... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now