2026 CVE Vulnerabilities
46,943 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-72557 | HIGH | 8.8 | — | Aug 11, 2026 | An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of any extensi... |
| CVE-2026-72556 | HIGH | 8.8 | — | Aug 11, 2026 | A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by expl... |
| CVE-2026-72555 | HIGH | 8.1 | — | Aug 11, 2026 | A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.role... |
| CVE-2026-72554 | MEDIUM | 6.5 | — | Aug 11, 2026 | A broken access control vulnerability in Ladybird Web Solution Faveo Helpdesk 2.0.3 allows any self-registered customer ... |
| CVE-2026-72553 | MEDIUM | 5.4 | — | Aug 11, 2026 | A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta 1 allows any registered member to inject persisten... |
| CVE-2026-72552 | HIGH | 7.5 | — | Aug 11, 2026 | A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to make the ... |
| CVE-2026-72551 | HIGH | 8.8 | — | Aug 11, 2026 | A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role to execute... |
| CVE-2026-72550 | CRITICAL | 9.8 | — | Aug 11, 2026 | An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to ex... |
| CVE-2026-72549 | MEDIUM | 5.3 | — | Aug 11, 2026 | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers ... |
| CVE-2026-72548 | HIGH | 7.5 | — | Aug 11, 2026 | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers ... |
| CVE-2026-72547 | HIGH | 7.1 | — | Aug 11, 2026 | An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event org... |
| CVE-2026-72546 | HIGH | 7.1 | — | Aug 11, 2026 | An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event org... |
| CVE-2026-72545 | HIGH | 7.5 | — | Aug 11, 2026 | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote ... |
| CVE-2026-72544 | HIGH | 7.5 | — | Aug 11, 2026 | An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers ... |
| CVE-2026-72543 | HIGH | 7.5 | — | Aug 11, 2026 | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote ... |
| CVE-2026-72542 | MEDIUM | 5.4 | — | Aug 11, 2026 | A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows authenticated operators to write ... |
| CVE-2026-72541 | MEDIUM | 6.5 | — | Aug 11, 2026 | A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace membe... |
| CVE-2026-72540 | — | — | 0.2% | Aug 11, 2026 | Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid. |
| CVE-2026-72539 | MEDIUM | 6.5 | — | Aug 11, 2026 | An information disclosure vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace mem... |
| CVE-2026-72538 | HIGH | 8.8 | — | Aug 11, 2026 | An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code... |
| CVE-2026-72537 | HIGH | 8.8 | — | Aug 11, 2026 | A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-s... |
| CVE-2026-72536 | HIGH | 8.6 | — | Aug 11, 2026 | A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mani... |
| CVE-2026-72535 | HIGH | 8.6 | — | Aug 11, 2026 | A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint... |
| CVE-2026-72534 | HIGH | 8.8 | — | Aug 11, 2026 | A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-s... |
| CVE-2026-72533 | HIGH | 8.8 | — | Aug 11, 2026 | An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypas... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now