2026 CVE Vulnerabilities
45,091 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-59205 | HIGH | 7.5 | — | Jul 14, 2026 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigge... |
| CVE-2026-59204 | HIGH | 7.5 | 0.4% | Jul 14, 2026 | Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component... |
| CVE-2026-59203 | HIGH | 7.5 | 0.4% | Jul 14, 2026 | Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a n... |
| CVE-2026-59199 | HIGH | 7.5 | 0.4% | Jul 14, 2026 | Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-o... |
| CVE-2026-59198 | HIGH | 7.5 | — | Jul 14, 2026 | Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer w... |
| CVE-2026-55651 | HIGH | 7.1 | — | Jul 14, 2026 | Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an Excessive Data Exposure vulnerability in ... |
| CVE-2026-15392 | HIGH | 7.7 | 0.2% | Jul 14, 2026 | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The co... |
| CVE-2026-14504 | HIGH | 8.2 | 0.3% | Jul 14, 2026 | An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on ... |
| CVE-2026-12707 | HIGH | 7.5 | — | Jul 14, 2026 | Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to unbounded queuing of p... |
| CVE-2026-12659 | HIGH | 8.7 | — | Jul 14, 2026 | A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of e... |
| CVE-2026-12523 | HIGH | 7.5 | 0.3% | Jul 14, 2026 | Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by mea... |
| CVE-2026-11917 | HIGH | 7.2 | — | Jul 14, 2026 | A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of fi... |
| CVE-2026-11403 | HIGH | 8.7 | 0.3% | Jul 14, 2026 | A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to... |
| CVE-2026-9653 | HIGH | 8.7 | — | Jul 14, 2026 | A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper va... |
| CVE-2026-9140 | HIGH | 8.7 | — | Jul 14, 2026 | A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper handling of a UDP un... |
| CVE-2026-8590 | HIGH | 8.7 | 0.3% | Jul 14, 2026 | Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Cons... |
| CVE-2026-60114 | HIGH | 8.7 | 0.3% | Jul 14, 2026 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows attacke... |
| CVE-2026-58477 | HIGH | 7.5 | — | Jul 14, 2026 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauth... |
| CVE-2026-58476 | HIGH | 8.1 | — | Jul 14, 2026 | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a cross-site request forgery vulnerability that al... |
| CVE-2026-51105 | HIGH | 7.5 | 0.3% | Jul 14, 2026 | Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via t... |
| CVE-2026-15736 | HIGH | 8.3 | 0.3% | Jul 14, 2026 | Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of ... |
| CVE-2026-15696 | HIGH | 8.8 | — | Jul 14, 2026 | A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the... |
| CVE-2026-15695 | HIGH | 8.8 | 0.8% | Jul 14, 2026 | A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file... |
| CVE-2026-15694 | HIGH | 8.8 | — | Jul 14, 2026 | A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/S... |
| CVE-2026-10714 | HIGH | 8.8 | — | Jul 14, 2026 | A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature valid... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now