2026 CVE Vulnerabilities
64,702 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-44048 | HIGH | 8.8 | 0.4% | May 21, 2026 | A stack-based buffer overflow via UCS-2 type confusion in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a rem... |
| CVE-2026-44047 | HIGH | 8.8 | 0.4% | May 21, 2026 | An SQL injection vulnerability in the MySQL CNID backend in Netatalk 3.1.0 through 4.4.2 allows a remote authenticated a... |
| CVE-2026-6279 | CRITICAL | 9.8 | 2.2% | May 21, 2026 | The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP F... |
| CVE-2026-2734 | MEDIUM | 6.5 | 0.4% | May 21, 2026 | In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` G... |
| CVE-2026-1543 | MEDIUM | 6.4 | 0.3% | May 21, 2026 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in ... |
| CVE-2026-4811 | MEDIUM | 4.9 | 0.3% | May 21, 2026 | The WPB Floating Menu & Categories for WordPress – Sticky Side Menu with Icons plugin for WordPress is vulnerable to Sto... |
| CVE-2026-9152 | CRITICAL | 10 | 0.3% | May 21, 2026 | A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search ind... |
| CVE-2026-48172 | CRITICAL | 9.8 | 18.9% | May 21, 2026 | LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild i... |
| CVE-2026-1881 | MEDIUM | 4.3 | 0.2% | May 21, 2026 | The Broadstreet plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includ... |
| CVE-2026-9149 | MEDIUM | 6.5 | 0.3% | May 21, 2026 | A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted ... |
| CVE-2026-40165 | HIGH | 8.7 | 0.5% | May 21, 2026 | authentik is an open-source identity provider. Versions 2025.12.4 and prior, and versions 2026.2.0-rc1 through 2026.2.2 ... |
| CVE-2026-9150 | MEDIUM | 6.5 | 0.4% | May 20, 2026 | A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser w... |
| CVE-2026-8399 | — | — | — | May 20, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-47782 | MEDIUM | 4.6 | 0.1% | May 20, 2026 | Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL v... |
| CVE-2026-47372 | CRITICAL | 9.1 | 0.4% | May 20, 2026 | Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the buil... |
| CVE-2026-40102 | MEDIUM | 6.5 | 0.3% | May 20, 2026 | Plane is an open-source project management tool. In versions 1.3.0 and below, SavedAnalyticEndpoint passes the user-cont... |
| CVE-2026-40094 | MEDIUM | 4.3 | 0.3% | May 20, 2026 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and prior, network... |
| CVE-2026-40092 | HIGH | 7.5 | 0.6% | May 20, 2026 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and below, a malic... |
| CVE-2026-39960 | MEDIUM | 5.4 | 0.2% | May 20, 2026 | Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.28.1 and below contain flawed logic that cause... |
| CVE-2026-8632 | HIGH | 7.8 | 0.9% | May 20, 2026 | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vul... |
| CVE-2026-8631 | CRITICAL | 9.8 | 1.7% | May 20, 2026 | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vul... |
| CVE-2026-47373 | HIGH | 7.5 | 0.4% | May 20, 2026 | Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in e... |
| CVE-2026-9144 | HIGH | 8.4 | 0.4% | May 20, 2026 | Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a stored cross-site scripting vulnerability in the embedde... |
| CVE-2026-9141 | CRITICAL | 9.8 | 0.5% | May 20, 2026 | Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web... |
| CVE-2026-9139 | CRITICAL | 9.8 | 0.5% | May 20, 2026 | Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now