2026 CVE Vulnerabilities
47,041 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-13739 | HIGH | 8.8 | — | Aug 11, 2026 | A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability relate... |
| CVE-2026-13738 | CRITICAL | 9.2 | — | Aug 11, 2026 | CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Soft... |
| CVE-2026-13737 | CRITICAL | 9.2 | — | Aug 11, 2026 | CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upg... |
| CVE-2026-58231 | CRITICAL | 10 | 0.7% | Aug 11, 2026 | SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially craf... |
| CVE-2026-73162 | MEDIUM | 5.3 | 0.2% | Aug 11, 2026 | Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: * /acco... |
| CVE-2026-33922 | MEDIUM | 6.8 | 0.2% | Aug 11, 2026 | A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to in... |
| CVE-2026-33921 | MEDIUM | 5.2 | 0.1% | Aug 11, 2026 | The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver ... |
| CVE-2026-73161 | MEDIUM | 5.1 | 0.2% | Aug 11, 2026 | Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feat... |
| CVE-2026-73160 | HIGH | 8.7 | — | Aug 11, 2026 | Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_events endpoi... |
| CVE-2026-73159 | MEDIUM | 5.1 | 0.2% | Aug 11, 2026 | Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's ... |
| CVE-2026-73158 | MEDIUM | 5.1 | 0.2% | Aug 11, 2026 | Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can cont... |
| CVE-2026-73157 | LOW | 2.3 | 0.3% | Aug 11, 2026 | Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser interface usi... |
| CVE-2026-72694 | HIGH | 7.1 | 0.1% | Aug 11, 2026 | A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low... |
| CVE-2026-72693 | HIGH | 7.8 | 0.1% | Aug 11, 2026 | `openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged ... |
| CVE-2026-71218 | MEDIUM | 5.3 | 0.4% | Aug 11, 2026 | A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function,... |
| CVE-2026-71217 | HIGH | 7.5 | 0.4% | Aug 11, 2026 | A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON wit... |
| CVE-2026-15567 | HIGH | 7.5 | 0.4% | Aug 11, 2026 | A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token dec... |
| CVE-2026-15565 | HIGH | 7.5 | 0.5% | Aug 11, 2026 | A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on... |
| CVE-2026-15563 | HIGH | 7.4 | 0.3% | Aug 11, 2026 | A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing... |
| CVE-2026-15562 | HIGH | 7.5 | 0.4% | Aug 11, 2026 | A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and... |
| CVE-2026-15561 | HIGH | 7.5 | 0.4% | Aug 11, 2026 | A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an at... |
| CVE-2026-15560 | HIGH | 8.1 | 0.4% | Aug 11, 2026 | when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmars... |
| CVE-2026-15556 | HIGH | 8.1 | 0.2% | Aug 11, 2026 | A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching th... |
| CVE-2026-15555 | HIGH | 8.8 | 0.3% | Aug 11, 2026 | A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via ... |
| CVE-2026-15554 | HIGH | 7.4 | 0.2% | Aug 11, 2026 | the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authenti... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now