2026 CVE Vulnerabilities
45,452 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26704 | CRITICAL | 9.8 | 0.4% | Mar 2, 2026 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_category.php. |
| CVE-2026-28286 | CRITICAL | 9.9 | 0.4% | Mar 2, 2026 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, t... |
| CVE-2026-26708 | CRITICAL | 9.8 | 0.3% | Mar 2, 2026 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_user.php. |
| CVE-2026-26700 | CRITICAL | 9.8 | 0.4% | Mar 2, 2026 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_employee.php. |
| CVE-2026-24105 | CRITICAL | 9.8 | 1.7% | Mar 2, 2026 | An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi. The value of `v1` was not check... |
| CVE-2026-26720 | CRITICAL | 9.8 | 0.8% | Mar 2, 2026 | An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts mod... |
| CVE-2026-26701 | CRITICAL | 9.8 | 0.5% | Mar 2, 2026 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_tecnical_user... |
| CVE-2026-24112 | CRITICAL | 9.8 | 0.5% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value... |
| CVE-2026-24110 | CRITICAL | 9.8 | 0.4% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may send overly long `addDhcpRules` data. When these ... |
| CVE-2026-24101 | CRITICAL | 9.8 | 1.7% | Mar 2, 2026 | An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` wi... |
| CVE-2026-26703 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php... |
| CVE-2026-26702 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php. |
| CVE-2026-26696 | CRITICAL | 9.8 | 0.5% | Mar 2, 2026 | code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php. |
| CVE-2026-26695 | CRITICAL | 9.8 | 0.5% | Mar 2, 2026 | code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php. |
| CVE-2026-26694 | CRITICAL | 9.8 | 0.5% | Mar 2, 2026 | code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal_view.php. |
| CVE-2026-24115 | CRITICAL | 9.8 | 0.7% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the sizes of `gstup` and `gstdwn` before co... |
| CVE-2026-24114 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate `pPortMapIndex` may lead to buffer overflow... |
| CVE-2026-24113 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the valu... |
| CVE-2026-24111 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value... |
| CVE-2026-24109 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the valu... |
| CVE-2026-24108 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the valu... |
| CVE-2026-24107 | CRITICAL | 9.8 | 2.2% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the value of `usbPartitionName`, which is d... |
| CVE-2026-23600 | CRITICAL | 9.8 | 1.0% | Mar 2, 2026 | A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS). |
| CVE-2026-3432 | CRITICAL | 9.1 | 0.3% | Mar 2, 2026 | On SimStudio version below to 0.5.74, the `/api/auth/oauth/token` endpoint contains a code path that bypasses all author... |
| CVE-2026-3431 | CRITICAL | 9.8 | 0.4% | Mar 2, 2026 | On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now