2026 CVE Vulnerabilities
65,328 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-6111 | MEDIUM | 6.5 | 0.3% | Apr 12, 2026 | A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the function decode_image of t... |
| CVE-2026-6110 | CRITICAL | 9.8 | 0.4% | Apr 12, 2026 | A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function generate_thoughts of t... |
| CVE-2026-1116 | MEDIUM | 6.1 | 0.3% | Apr 12, 2026 | A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in p... |
| CVE-2026-6109 | HIGH | 8.8 | 0.2% | Apr 12, 2026 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted element is the function evaluateCod... |
| CVE-2026-6108 | MEDIUM | 6.3 | 1.3% | Apr 12, 2026 | A vulnerability was found in 1Panel-dev MaxKB up to 2.6.1. The affected element is the function execute of the file apps... |
| CVE-2026-6107 | MEDIUM | 5.1 | 0.2% | Apr 12, 2026 | A flaw has been found in 1Panel-dev MaxKB up to 2.6.1. This issue affects some unknown processing of the file apps/commo... |
| CVE-2026-6106 | LOW | 3.5 | 0.3% | Apr 11, 2026 | A vulnerability was detected in 1Panel-dev MaxKB up to 2.2.1. This vulnerability affects the function StaticHeadersMiddl... |
| CVE-2026-6105 | HIGH | 7.3 | 0.3% | Apr 11, 2026 | A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This affects an unknown part of the fi... |
| CVE-2026-31845 | CRITICAL | 9.3 | 0.5% | Apr 11, 2026 | A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6.4 and earlier in the Zadarma ... |
| CVE-2026-32146 | HIGH | 7.8 | 0.2% | Apr 11, 2026 | Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system... |
| CVE-2026-23900 | MEDIUM | 6.5 | 0.2% | Apr 11, 2026 | Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been d... |
| CVE-2026-5809 | HIGH | 7.1 | 0.5% | Apr 11, 2026 | The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.2. Th... |
| CVE-2026-34621 | HIGH | 8.6 | 7.1% | Apr 11, 2026 | Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of ... |
| CVE-2026-5226 | MEDIUM | 6.1 | 0.5% | Apr 11, 2026 | The Optimole – Optimize Images in Real Time plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL... |
| CVE-2026-5217 | HIGH | 7.2 | 0.4% | Apr 11, 2026 | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vuln... |
| CVE-2026-5207 | MEDIUM | 6.5 | 0.4% | Apr 11, 2026 | The LifterLMS plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and i... |
| CVE-2026-5144 | HIGH | 8.8 | 0.4% | Apr 11, 2026 | The BuddyPress Groupblog plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including... |
| CVE-2026-4979 | MEDIUM | 5 | 0.3% | Apr 11, 2026 | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPre... |
| CVE-2026-4895 | MEDIUM | 6.4 | 0.4% | Apr 11, 2026 | The GreenShift - Animation and Page Builder Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in ... |
| CVE-2026-3498 | MEDIUM | 6.4 | 0.2% | Apr 11, 2026 | The BlockArt Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'clientId' block attribute... |
| CVE-2026-3371 | MEDIUM | 4.3 | 0.4% | Apr 11, 2026 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Refere... |
| CVE-2026-3358 | MEDIUM | 5.4 | 0.4% | Apr 11, 2026 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized private course e... |
| CVE-2026-5496 | HIGH | 7.8 | 0.2% | Apr 11, 2026 | Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability... |
| CVE-2026-5495 | HIGH | 7.8 | 0.3% | Apr 11, 2026 | Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab... |
| CVE-2026-5494 | HIGH | 7.8 | 0.3% | Apr 11, 2026 | Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now