2026 CVE Vulnerabilities
45,092 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-62185 | HIGH | 8.6 | 0.3% | Jul 13, 2026 | Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access r... |
| CVE-2026-62184 | HIGH | 8.7 | 0.4% | Jul 13, 2026 | luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log ... |
| CVE-2026-61458 | HIGH | 8.7 | 0.3% | Jul 13, 2026 | PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-... |
| CVE-2026-58500 | HIGH | 8.2 | 0.3% | Jul 13, 2026 | MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on Android and iOS. In... |
| CVE-2026-58411 | HIGH | 7 | 0.3% | Jul 13, 2026 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, Cross-Site Scripting (XSS) vulnerabilities... |
| CVE-2026-51539 | HIGH | 7.5 | 0.3% | Jul 13, 2026 | A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. The issu... |
| CVE-2026-39042 | HIGH | 7.5 | 0.4% | Jul 13, 2026 | An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote... |
| CVE-2026-15685 | HIGH | 7.5 | 0.4% | Jul 13, 2026 | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote... |
| CVE-2026-15684 | HIGH | 7.3 | 0.1% | Jul 13, 2026 | Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attac... |
| CVE-2026-15683 | HIGH | 7.5 | 0.1% | Jul 13, 2026 | Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulne... |
| CVE-2026-15680 | HIGH | 7.5 | 0.3% | Jul 13, 2026 | Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerabil... |
| CVE-2026-15597 | HIGH | 7.3 | 0.3% | Jul 13, 2026 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/2.php. This affects an unkno... |
| CVE-2026-58410 | HIGH | 7.1 | 0.2% | Jul 13, 2026 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the fam... |
| CVE-2026-48364 | HIGH | 8.2 | 0.2% | Jul 13, 2026 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that c... |
| CVE-2026-48363 | HIGH | 8.2 | 0.2% | Jul 13, 2026 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that c... |
| CVE-2026-55773 | HIGH | 8.8 | 0.3% | Jul 13, 2026 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi... |
| CVE-2026-55771 | HIGH | 8.8 | 0.3% | Jul 13, 2026 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi... |
| CVE-2026-55772 | HIGH | 8.8 | 0.5% | Jul 13, 2026 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi... |
| CVE-2026-49972 | HIGH | 8.8 | 0.8% | Jul 13, 2026 | Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated attackers to achieve remo... |
| CVE-2026-49970 | HIGH | 8.8 | 0.8% | Jul 13, 2026 | Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath() function that allows a... |
| CVE-2026-49969 | HIGH | 7.4 | 0.2% | Jul 13, 2026 | Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue... |
| CVE-2026-26396 | HIGH | 7.5 | — | Jul 13, 2026 | OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/applicati... |
| CVE-2026-61463 | HIGH | 8.8 | — | Jul 13, 2026 | Shiori contains a privilege escalation vulnerability in the account update endpoint that allows authenticated users to m... |
| CVE-2026-57432 | HIGH | 8.4 | 0.2% | Jul 13, 2026 | Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack... |
| CVE-2026-59245 | HIGH | 8.1 | 0.4% | Jul 13, 2026 | In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` collided with the global all-DAGs permission reso... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now