2026 CVE Vulnerabilities
63,685 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-45039 | CRITICAL | 9.8 | 0.3% | May 28, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the internode RPC layer authenticate... |
| CVE-2026-44394 | HIGH | 8.1 | 0.2% | May 28, 2026 | An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not p... |
| CVE-2026-43979 | MEDIUM | 5 | 0.3% | May 28, 2026 | Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.0, PDFService._markdo... |
| CVE-2026-43000 | HIGH | 8.8 | 0.3% | May 28, 2026 | An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation ... |
| CVE-2026-42999 | HIGH | 8.8 | 0.3% | May 28, 2026 | An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforce_call unconditi... |
| CVE-2026-42998 | HIGH | 8.8 | 0.3% | May 28, 2026 | An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin d... |
| CVE-2026-30761 | HIGH | 7.3 | 0.4% | May 28, 2026 | An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin v1.1.6... |
| CVE-2026-30760 | HIGH | 7.3 | 0.3% | May 28, 2026 | An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the... |
| CVE-2026-46561 | MEDIUM | 5 | 0.2% | May 28, 2026 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the PREREQFUNCTION-based p... |
| CVE-2026-45787 | CRITICAL | 9.1 | 0.1% | May 28, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic ... |
| CVE-2026-45374 | CRITICAL | 9.6 | 0.3% | May 28, 2026 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, the task_create tool spawns durable sub-agents... |
| CVE-2026-45373 | HIGH | 7.4 | 0.2% | May 28, 2026 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames t... |
| CVE-2026-45353 | HIGH | 7.8 | 0.1% | May 28, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vul... |
| CVE-2026-45348 | HIGH | 8.7 | 0.2% | May 28, 2026 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the packages.js template a... |
| CVE-2026-45323 | CRITICAL | 9.6 | 0.3% | May 28, 2026 | MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered witho... |
| CVE-2026-45311 | CRITICAL | 9.6 | 0.4% | May 28, 2026 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the run_tests tool executes cargo test in... |
| CVE-2026-45310 | HIGH | 7.4 | 0.2% | May 28, 2026 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.22, the fetch_url tool validates the initial URL's... |
| CVE-2026-45307 | MEDIUM | 6.1 | 0.2% | May 28, 2026 | Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.20-alpha, the... |
| CVE-2026-45306 | MEDIUM | 6.5 | 0.2% | May 28, 2026 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the fix for CVE-2026-33509... |
| CVE-2026-45297 | MEDIUM | 5.3 | 0.2% | May 28, 2026 | OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, there is a cross-tenant IDOR on feature-flag and assi... |
| CVE-2026-45296 | HIGH | 7.7 | 0.2% | May 28, 2026 | OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, OpenReplay's Python API exposes several app_apikey ro... |
| CVE-2026-45058 | CRITICAL | 9.4 | 0.2% | May 28, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is... |
| CVE-2026-45021 | MEDIUM | 5.1 | 0.2% | May 28, 2026 | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to 2.7.25, 2... |
| CVE-2026-44798 | HIGH | 7.1 | 0.3% | May 28, 2026 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to ... |
| CVE-2026-44797 | HIGH | 8.5 | 0.2% | May 28, 2026 | Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot's Webhook dat... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now