2026 CVE Vulnerabilities
64,471 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-9789 | HIGH | 8.5 | 0.2% | May 28, 2026 | A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052. The vulne... |
| CVE-2026-8915 | HIGH | 8.8 | 0.3% | May 28, 2026 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot:... |
| CVE-2026-4888 | MEDIUM | 4.3 | 0.3% | May 28, 2026 | The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder plugin for WordPress is vulnerable to... |
| CVE-2026-9739 | CRITICAL | 9.4 | 0.3% | May 27, 2026 | Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-... |
| CVE-2026-46544 | MEDIUM | 5.3 | 0.4% | May 27, 2026 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro... |
| CVE-2026-46538 | MEDIUM | 5.9 | 0.2% | May 27, 2026 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro... |
| CVE-2026-46416 | MEDIUM | 6.3 | 0.3% | May 27, 2026 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro... |
| CVE-2026-46414 | HIGH | 8.8 | 0.5% | May 27, 2026 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro... |
| CVE-2026-46402 | HIGH | 8.1 | 0.7% | May 27, 2026 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro... |
| CVE-2026-45322 | HIGH | 7.8 | 1.7% | May 27, 2026 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releas... |
| CVE-2026-9208 | HIGH | 8.8 | 0.4% | May 27, 2026 | Tanium addressed an unauthorized code execution vulnerability in Connect. |
| CVE-2026-45152 | HIGH | 7.8 | 0.7% | May 27, 2026 | uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command injection vulnerability ex... |
| CVE-2026-45083 | CRITICAL | 9.8 | 0.4% | May 27, 2026 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From 4.8.0 to bef... |
| CVE-2026-44720 | MEDIUM | 6.9 | 0.2% | May 27, 2026 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication ... |
| CVE-2026-44247 | HIGH | 7.4 | 0.2% | May 27, 2026 | Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook serv... |
| CVE-2026-47270 | MEDIUM | 6.3 | 0.1% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb is a PAM modu... |
| CVE-2026-47269 | HIGH | 7.4 | 0.3% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb's deny_remot... |
| CVE-2026-45137 | HIGH | 8.2 | 0.2% | May 27, 2026 | Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to before 1.0... |
| CVE-2026-45136 | HIGH | 7.8 | 0.2% | May 27, 2026 | claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.... |
| CVE-2026-44713 | HIGH | 8.8 | 0.2% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/tmux.c reads the ... |
| CVE-2026-44712 | HIGH | 8.2 | 0.2% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, a crafted UUID such a... |
| CVE-2026-44711 | HIGH | 7.9 | 0.2% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pa... |
| CVE-2026-44710 | MEDIUM | 4.6 | 0.2% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/device.c passed t... |
| CVE-2026-44709 | HIGH | 7.8 | 0.2% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, pamusb-pinentry reads... |
| CVE-2026-44660 | HIGH | 7.5 | 0.4% | May 27, 2026 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujso... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now