2026 CVE Vulnerabilities
64,775 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27851 | CRITICAL | 9.1 | 0.4% | May 12, 2026 | When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted... |
| CVE-2026-4827 | HIGH | 8.7 | 0.3% | May 12, 2026 | CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the networ... |
| CVE-2026-45218 | HIGH | 7.7 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Trave... |
| CVE-2026-45215 | MEDIUM | 5.3 | 0.2% | May 12, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Emb... |
| CVE-2026-45214 | HIGH | 8.5 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpro Xpro Elemento... |
| CVE-2026-45213 | HIGH | 7.6 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR wo... |
| CVE-2026-45212 | MEDIUM | 5.3 | 0.2% | May 12, 2026 | Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting ... |
| CVE-2026-45211 | HIGH | 8.5 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExpe... |
| CVE-2026-45210 | MEDIUM | 5.4 | 0.2% | May 12, 2026 | Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured ... |
| CVE-2026-42742 | HIGH | 8.5 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPF... |
| CVE-2026-42741 | HIGH | 8.5 | 0.2% | May 12, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms V... |
| CVE-2026-41713 | HIGH | 8.2 | 0.2% | May 12, 2026 | A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an uninte... |
| CVE-2026-41712 | HIGH | 7.5 | 0.3% | May 12, 2026 | Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in ... |
| CVE-2026-32684 | LOW | 2.9 | 0.1% | May 12, 2026 | The application does not impose strict enough restrictions on directory access permissions, posing a risk that other mal... |
| CVE-2026-2465 | HIGH | 8.8 | 0.2% | May 12, 2026 | Incorrect Authorization vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Industry an... |
| CVE-2026-8162 | HIGH | 7.5 | 0.3% | May 12, 2026 | multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception. By sending a multipart/f... |
| CVE-2026-8161 | HIGH | 7.5 | 0.5% | May 12, 2026 | multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception. By sending a multipart/f... |
| CVE-2026-8159 | HIGH | 7.5 | 0.3% | May 12, 2026 | multiparty@4.2.3 and lower versions are vulnerable to denial of service via regular expression backtracking in the Conte... |
| CVE-2026-8072 | CRITICAL | 9.2 | 0.2% | May 12, 2026 | Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Boar... |
| CVE-2026-7428 | CRITICAL | 9.2 | 0.2% | May 12, 2026 | Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have cre... |
| CVE-2026-6813 | MEDIUM | 4.4 | 0.2% | May 12, 2026 | The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up ... |
| CVE-2026-6800 | MEDIUM | 4.4 | 0.2% | May 12, 2026 | The FastBots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to,... |
| CVE-2026-6001 | HIGH | 8.8 | 0.2% | May 12, 2026 | Authorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd. Co. BAPSİS allows Exploitation of... |
| CVE-2026-5029 | HIGH | 8.7 | 0.3% | May 12, 2026 | A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which ... |
| CVE-2026-44412 | HIGH | 7.8 | 0.1% | May 12, 2026 | A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The affected applications con... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now