2026 CVE Vulnerabilities
64,766 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-44431 | MEDIUM | 5.3 | 0.5% | May 13, 2026 | urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-le... |
| CVE-2026-44295 | HIGH | 8.7 | 0.4% | May 13, 2026 | protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbjs static code generation could e... |
| CVE-2026-44294 | MEDIUM | 5.3 | 0.4% | May 13, 2026 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated ... |
| CVE-2026-44293 | HIGH | 8.8 | 0.4% | May 13, 2026 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated ... |
| CVE-2026-44292 | MEDIUM | 5.3 | 0.3% | May 13, 2026 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated ... |
| CVE-2026-44291 | HIGH | 8.1 | 0.5% | May 13, 2026 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain... |
| CVE-2026-44290 | HIGH | 7.5 | 0.4% | May 13, 2026 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed ce... |
| CVE-2026-44289 | HIGH | 7.5 | 0.6% | May 13, 2026 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recu... |
| CVE-2026-44288 | MEDIUM | 5.3 | 0.3% | May 13, 2026 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a... |
| CVE-2026-43489 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: liveupdate: luo_file: remember retrieve() status L... |
| CVE-2026-43488 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Prevent interrupt storm on host controll... |
| CVE-2026-43487 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Disable LPM on ST1000DM010-2EP102... |
| CVE-2026-43486 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: arm64: contpte: fix set_access_flags() no-op check ... |
| CVE-2026-43485 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: nouveau/gsp: drop WARN_ON in ACPI probes These WAR... |
| CVE-2026-43484 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid bitfield RMW for claim/retune flag... |
| CVE-2026-43483 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Set/clear CR8 write interception when AVI... |
| CVE-2026-43482 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Disable preemption between scx_claim_exi... |
| CVE-2026-43481 | HIGH | 7.8 | 0.1% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: net-shapers: don't free reply skb after genlmsg_rep... |
| CVE-2026-43480 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp3x-rt5682-max9836: Add missing error ... |
| CVE-2026-43479 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_loc... |
| CVE-2026-43478 | MEDIUM | 5.5 | 0.1% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1011: Use component to get the dapm... |
| CVE-2026-43477 | MEDIUM | 5.5 | 0.2% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR timings after enabling ... |
| CVE-2026-43476 | HIGH | 7.8 | 0.1% | May 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in sps30_... |
| CVE-2026-42946 | HIGH | 7.4 | 0.9% | May 13, 2026 | A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory... |
| CVE-2026-42945 | HIGH | 8.1 | 68.0% | May 13, 2026 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists w... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now