2026 CVE Vulnerabilities
64,469 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-9801 | MEDIUM | 4.9 | 0.5% | May 28, 2026 | A flaw was found in Keycloak. A remote attacker with high privileges, such as a realm administrator configuring a malici... |
| CVE-2026-9798 | MEDIUM | 4.3 | 0.3% | May 28, 2026 | A flaw was found in Keycloak, an open-source identity and access management solution. When a user account is temporarily... |
| CVE-2026-9673 | MEDIUM | 6.8 | 0.2% | May 28, 2026 | Versions of the package json-2-csv from 3.15.0 and before 5.5.11 are vulnerable to CSV Injection via the preventCsvInjec... |
| CVE-2026-9644 | MEDIUM | 6.4 | 0.2% | May 28, 2026 | The LiveSmart Video Chat Live Video Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi... |
| CVE-2026-9009 | HIGH | 8.8 | 0.4% | May 28, 2026 | The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all vers... |
| CVE-2026-7533 | MEDIUM | 4.3 | 0.1% | May 28, 2026 | The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i... |
| CVE-2026-3173 | MEDIUM | 6.5 | 0.2% | May 28, 2026 | The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and i... |
| CVE-2026-9796 | MEDIUM | 6.5 | 0.2% | May 28, 2026 | A flaw was found in Keycloak. An authenticated administrator with the `manage-clients` role can exploit a Time-of-check ... |
| CVE-2026-9795 | HIGH | 7.3 | 0.3% | May 28, 2026 | A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with limited client man... |
| CVE-2026-9794 | MEDIUM | 5.3 | 0.3% | May 28, 2026 | A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially cra... |
| CVE-2026-9793 | HIGH | 7.5 | 0.2% | May 28, 2026 | A flaw was found in Keycloak. When a JSON Web Encryption (JWE) encrypted request object is submitted, Keycloak may incor... |
| CVE-2026-9792 | MEDIUM | 6.5 | 0.3% | May 28, 2026 | A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component. When cer... |
| CVE-2026-9791 | MEDIUM | 4.3 | 0.2% | May 28, 2026 | A flaw was found in Keycloak. An authenticated user with existing organization membership can exploit this flaw by acces... |
| CVE-2026-9241 | MEDIUM | 4.3 | 0.2% | May 28, 2026 | The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Authorization Bypass Thro... |
| CVE-2026-9228 | MEDIUM | 4.3 | 0.2% | May 28, 2026 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in ... |
| CVE-2026-7802 | HIGH | 8.8 | 0.4% | May 28, 2026 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and i... |
| CVE-2026-5737 | MEDIUM | 6.5 | 0.4% | May 28, 2026 | The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and i... |
| CVE-2026-32999 | CRITICAL | 9 | 0.3% | May 28, 2026 | Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant admin... |
| CVE-2026-32998 | CRITICAL | 9.4 | 0.4% | May 28, 2026 | This vulnerability in Veeam Service Provider Console allows for remote code execution. |
| CVE-2026-32997 | HIGH | 8.6 | 0.5% | May 28, 2026 | A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-base... |
| CVE-2026-32996 | HIGH | 7.3 | 0.2% | May 28, 2026 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. |
| CVE-2026-32995 | HIGH | 7.5 | 0.3% | May 28, 2026 | The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.5, <7... |
| CVE-2026-2374 | HIGH | 7.2 | 0.3% | May 28, 2026 | The Login No Captcha reCAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `$_SERVER['PHP_... |
| CVE-2026-9789 | HIGH | 8.5 | 0.2% | May 28, 2026 | A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052. The vulne... |
| CVE-2026-8915 | HIGH | 8.8 | 0.3% | May 28, 2026 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot:... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now