2026 CVE Vulnerabilities

65,328 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-6166HIGH7.3A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0. This issue affects s...
CVE-2026-5936CRITICAL9.8An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests t...
CVE-2026-5085CRITICAL9.1Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSessionID method return...
CVE-2026-40436HIGH7.5The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS porta...
CVE-2026-3830HIGH8.6The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before ...
CVE-2026-34866MEDIUM5.1Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect av...
CVE-2026-34865CRITICAL9.1Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect av...
CVE-2026-6165HIGH7.3A weakness has been identified in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unkno...
CVE-2026-6164HIGH7.3A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0. This affects an unknown part o...
CVE-2026-6163HIGH7.3A vulnerability was identified in code-projects Lost and Found Thing Management 1.0. Affected by this issue is some unkn...
CVE-2026-40447HIGH7.5Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affect...
CVE-2026-21014LOW2.8Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. Use...
CVE-2026-21013MEDIUM5.5Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive in...
CVE-2026-21012LOW3.3External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create f...
CVE-2026-21011MEDIUM6.8Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attacker...
CVE-2026-21010HIGH7.8Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged fu...
CVE-2026-21009MEDIUM6.8Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass ...
CVE-2026-21008MEDIUM6.5Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitiv...
CVE-2026-21007MEDIUM6.8Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to by...
CVE-2026-21006LOW2.4Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden not...
CVE-2026-6162LOW3.5A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of ...
CVE-2026-6161HIGH7.3A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chat...
CVE-2026-6160MEDIUM5.5A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the function SimpleChatbox_PHP ...
CVE-2026-6159MEDIUM4.3A vulnerability has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerability is an unknown f...
CVE-2026-6158HIGH7.3A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgra...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now