2026 CVE Vulnerabilities
43,225 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-48804 | HIGH | 7.5 | — | Aug 11, 2026 | python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server store... |
| CVE-2026-45618 | CRITICAL | 10 | — | Aug 11, 2026 | LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbit... |
| CVE-2026-19091 | HIGH | 8.1 | 0.8% | Aug 11, 2026 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to ... |
| CVE-2026-18844 | HIGH | 8.1 | — | Aug 11, 2026 | The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (... |
| CVE-2026-16230 | CRITICAL | 9.8 | 0.5% | Aug 11, 2026 | The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path vali... |
| CVE-2026-13457 | HIGH | 7.5 | 0.6% | Aug 11, 2026 | The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all ... |
| CVE-2026-73228 | MEDIUM | 5.3 | — | Aug 11, 2026 | Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's request.data parsing ... |
| CVE-2026-73227 | HIGH | 8.1 | — | Aug 11, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm al... |
| CVE-2026-73226 | HIGH | 8.8 | — | Aug 11, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm al... |
| CVE-2026-73225 | HIGH | 8.1 | — | Aug 11, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm al... |
| CVE-2026-73224 | HIGH | 8.8 | — | Aug 11, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm al... |
| CVE-2026-73223 | HIGH | 8.1 | — | Aug 11, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm al... |
| CVE-2026-73222 | HIGH | 8.8 | — | Aug 11, 2026 | Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio ... |
| CVE-2026-73221 | MEDIUM | 5.3 | — | Aug 11, 2026 | CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user... |
| CVE-2026-72742 | CRITICAL | 9.2 | 0.4% | Aug 11, 2026 | DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attacke... |
| CVE-2026-69119 | HIGH | 8.3 | — | Aug 11, 2026 | Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows any aut... |
| CVE-2026-69117 | MEDIUM | 6.5 | — | Aug 11, 2026 | NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only... |
| CVE-2026-69115 | HIGH | 7.1 | — | Aug 11, 2026 | OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-o... |
| CVE-2026-48809 | HIGH | 7.5 | — | Aug 11, 2026 | python-engineio is a Python implementation of the Engine.IO realtime client and server. Versions prior to 4.13.2 have tw... |
| CVE-2026-48802 | HIGH | 7.5 | — | Aug 11, 2026 | python-engineio is a Python implementation of the Engine.IO realtime client and server. Prior to version 4.13.2, an atta... |
| CVE-2026-18712 | HIGH | 8.1 | — | Aug 11, 2026 | An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileg... |
| CVE-2026-18711 | HIGH | 7.1 | — | Aug 11, 2026 | An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to ... |
| CVE-2026-18709 | MEDIUM | 6.4 | — | Aug 11, 2026 | An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit ... |
| CVE-2026-18708 | MEDIUM | 6.4 | — | Aug 11, 2026 | An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to caus... |
| CVE-2026-18707 | MEDIUM | 5.3 | — | Aug 11, 2026 | An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the se... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now