2026 CVE Vulnerabilities
65,045 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26944 | HIGH | 8.8 | 0.5% | Apr 20, 2026 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r... |
| CVE-2026-25883 | MEDIUM | 5.8 | 0.2% | Apr 20, 2026 | Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Ve... |
| CVE-2026-25058 | HIGH | 7.5 | 0.4% | Apr 20, 2026 | Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Ve... |
| CVE-2026-24468 | MEDIUM | 5.3 | 0.3% | Apr 20, 2026 | OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campa... |
| CVE-2026-24467 | CRITICAL | 9.8 | 0.9% | Apr 20, 2026 | OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campa... |
| CVE-2026-23774 | HIGH | 7.2 | 1.5% | Apr 20, 2026 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5,... |
| CVE-2026-6649 | MEDIUM | 6.3 | 0.2% | Apr 20, 2026 | A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some unknown functionality of the file /index/... |
| CVE-2026-6369 | MEDIUM | 5.5 | 0.1% | Apr 20, 2026 | An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local ... |
| CVE-2026-5760 | CRITICAL | 9.8 | 0.9% | Apr 20, 2026 | SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious to... |
| CVE-2026-4048 | HIGH | 7.2 | 2.1% | Apr 20, 2026 | OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker... |
| CVE-2026-3519 | HIGH | 7.2 | 2.1% | Apr 20, 2026 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacke... |
| CVE-2026-3518 | HIGH | 7.2 | 2.5% | Apr 20, 2026 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacke... |
| CVE-2026-3517 | HIGH | 7.2 | 18.2% | Apr 20, 2026 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacke... |
| CVE-2026-33558 | MEDIUM | 5.3 | 0.5% | Apr 20, 2026 | Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire ... |
| CVE-2026-33557 | CRITICAL | 9.1 | 0.6% | Apr 20, 2026 | A possible security vulnerability has been identified in Apache Kafka. By default, the broker property `sasl.oauthbeare... |
| CVE-2026-6648 | LOW | 3.5 | 0.2% | Apr 20, 2026 | A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component I... |
| CVE-2026-6636 | MEDIUM | 4.3 | 0.5% | Apr 20, 2026 | A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75b. Affected is the function Bu... |
| CVE-2026-6635 | HIGH | 7.3 | 0.5% | Apr 20, 2026 | A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the function tool_call of t... |
| CVE-2026-6634 | MEDIUM | 6.3 | 0.3% | Apr 20, 2026 | A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file ... |
| CVE-2026-6633 | LOW | 3.5 | 0.3% | Apr 20, 2026 | A security flaw has been discovered in Yifang CMS up to 2.0.5. The impacted element is the function store of the file pl... |
| CVE-2026-5958 | LOW | 2.1 | 0.1% | Apr 20, 2026 | When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separ... |
| CVE-2026-6654 | MEDIUM | 5.1 | 0.2% | Apr 20, 2026 | Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic... |
| CVE-2026-6632 | HIGH | 8.8 | 0.4% | Apr 20, 2026 | A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromSafeClientFilt... |
| CVE-2026-6631 | HIGH | 8.8 | 0.5% | Apr 20, 2026 | A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebExcptypemanFilter of th... |
| CVE-2026-6630 | HIGH | 8.8 | 0.4% | Apr 20, 2026 | A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGstDhcpSetSer of the fil... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now