2026 CVE Vulnerabilities
64,766 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-44245 | MEDIUM | 6.1 | 0.2% | May 12, 2026 | Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directiv... |
| CVE-2026-43685 | HIGH | 7.2 | 0.5% | May 12, 2026 | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject a... |
| CVE-2026-43680 | HIGH | 7.2 | 0.5% | May 12, 2026 | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a... |
| CVE-2026-42289 | HIGH | 8.8 | 0.1% | May 12, 2026 | ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user account creation and... |
| CVE-2026-42288 | CRITICAL | 10 | 0.6% | May 12, 2026 | ChurchCRM is an open-source church management system. Prior to 7.3.2, The fix for CVE-2026-39337 is incomplete. The pre-... |
| CVE-2026-42158 | LOW | 2.3 | 0.2% | May 12, 2026 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and veri... |
| CVE-2026-42157 | MEDIUM | 5.1 | 0.3% | May 12, 2026 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and veri... |
| CVE-2026-42156 | HIGH | 7.1 | 0.3% | May 12, 2026 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and veri... |
| CVE-2026-41901 | CRITICAL | 9 | 0.4% | May 12, 2026 | Thymeleaf is a server-side Java template engine for web and standalone environments. Prior to 3.1.5.RELEASE, a security ... |
| CVE-2026-1250 | HIGH | 7.5 | 0.3% | May 12, 2026 | The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to generic SQL Injection vi... |
| CVE-2026-8449 | — | — | — | May 12, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn. |
| CVE-2026-45227 | HIGH | 8.8 | 0.2% | May 12, 2026 | Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated ... |
| CVE-2026-45226 | HIGH | 7.6 | 0.3% | May 12, 2026 | Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that allows authenticated users ... |
| CVE-2026-45225 | HIGH | 7.6 | 0.4% | May 12, 2026 | Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that allows authenticated users t... |
| CVE-2026-44871 | HIGH | 8.8 | 1.2% | May 12, 2026 | Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS... |
| CVE-2026-44307 | HIGH | 8.7 | 0.6% | May 12, 2026 | Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\... |
| CVE-2026-44306 | MEDIUM | 5.3 | 0.2% | May 12, 2026 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.21 and 6.15.0, responses from the f... |
| CVE-2026-44305 | MEDIUM | 6.8 | 0.1% | May 12, 2026 | Lemur manages TLS certificate creation. Prior to 1.9.0, when LDAP TLS is enabled (LDAP_USE_TLS = True), Lemur's LDAP aut... |
| CVE-2026-44304 | HIGH | 8.1 | 0.2% | May 12, 2026 | Lemur manages TLS certificate creation. Prior to 1.9.0, Lemur's LDAP authentication module (lemur/auth/ldap.py) construc... |
| CVE-2026-44302 | HIGH | 7.5 | 0.3% | May 12, 2026 | Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1, Snappier.SnappyStr... |
| CVE-2026-44301 | HIGH | 8.1 | 0.3% | May 12, 2026 | Hugo is a static site generator. From 0.43 to before 0.161.0, when building a Hugo site that uses Node-based asset pipel... |
| CVE-2026-44296 | HIGH | 7.5 | 0.3% | May 12, 2026 | Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.167, a remote, unauthenticated denial of service (DoS) vul... |
| CVE-2026-44262 | CRITICAL | 9.4 | 5.9% | May 12, 2026 | Scramble generates API documentation for Laravel project. From 0.13.2 to before 0.13.22, when documentation endpoints ar... |
| CVE-2026-44260 | HIGH | 8.1 | 0.3% | May 12, 2026 | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the readonly flag set on the <efw:elFinder> JSP tag is int... |
| CVE-2026-44259 | MEDIUM | 4.6 | 0.1% | May 12, 2026 | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the previewServlet serves files with their detected MIME t... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now