2026 CVE Vulnerabilities
65,524 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-6003 | LOW | 2.4 | 0.2% | Apr 10, 2026 | A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This issue affects some unkn... |
| CVE-2026-6000 | MEDIUM | 4.3 | 0.3% | Apr 10, 2026 | A vulnerability was found in code-projects Online Library Management System 1.0. Affected is an unknown function of the ... |
| CVE-2026-5999 | MEDIUM | 6.3 | 0.2% | Apr 10, 2026 | A vulnerability has been found in JeecgBoot up to 3.9.1. This impacts an unknown function of the component SysAnnounceme... |
| CVE-2026-33551 | MEDIUM | 5.3 | 0.2% | Apr 10, 2026 | An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted applic... |
| CVE-2026-5998 | MEDIUM | 5.5 | 0.6% | Apr 10, 2026 | A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects the function dispatch of the file... |
| CVE-2026-5997 | CRITICAL | 9.8 | 1.8% | Apr 10, 2026 | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setLoginPass... |
| CVE-2026-5996 | CRITICAL | 9.8 | 1.8% | Apr 10, 2026 | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the functio... |
| CVE-2026-4977 | MEDIUM | 4.3 | 0.3% | Apr 10, 2026 | The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerab... |
| CVE-2026-4664 | MEDIUM | 5.3 | 0.7% | Apr 10, 2026 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, ... |
| CVE-2026-4351 | HIGH | 8.1 | 0.4% | Apr 10, 2026 | The Perfmatters plugin for WordPress is vulnerable to arbitrary file overwrite via path traversal in all versions up to,... |
| CVE-2026-4305 | MEDIUM | 6.1 | 0.3% | Apr 10, 2026 | The Royal WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the... |
| CVE-2026-4057 | MEDIUM | 4.3 | 0.4% | Apr 10, 2026 | The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability... |
| CVE-2026-3360 | HIGH | 7.5 | 0.6% | Apr 10, 2026 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an Insecure Direct Object Ref... |
| CVE-2026-2712 | MEDIUM | 5.4 | 0.4% | Apr 10, 2026 | The WP-Optimize plugin for WordPress is vulnerable to unauthorized access of functionality due to missing capability che... |
| CVE-2026-25203 | HIGH | 7.8 | 0.2% | Apr 10, 2026 | Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects M... |
| CVE-2026-1924 | MEDIUM | 4.3 | 0.2% | Apr 10, 2026 | The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl... |
| CVE-2026-1263 | MEDIUM | 6.4 | 0.3% | Apr 10, 2026 | The Webling plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.9.... |
| CVE-2026-5995 | CRITICAL | 9.8 | 1.8% | Apr 10, 2026 | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setMiniuiHomeInfoShow ... |
| CVE-2026-5994 | CRITICAL | 9.8 | 1.8% | Apr 10, 2026 | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setTelnetC... |
| CVE-2026-5993 | CRITICAL | 9.8 | 1.8% | Apr 10, 2026 | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setWiFi... |
| CVE-2026-5992 | HIGH | 8.8 | 0.5% | Apr 10, 2026 | A vulnerability was determined in Tenda F451 1.0.0.7. This affects the function fromP2pListFilter of the file /goform/P2... |
| CVE-2026-5991 | HIGH | 8.8 | 0.5% | Apr 10, 2026 | A vulnerability was found in Tenda F451 1.0.0.7. Affected by this issue is the function formWrlExtraSet of the file /gof... |
| CVE-2026-5990 | HIGH | 8.8 | 0.5% | Apr 10, 2026 | A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function fromSafeEmailFilter... |
| CVE-2026-5989 | HIGH | 8.8 | 0.5% | Apr 10, 2026 | A flaw has been found in Tenda F451 1.0.0.7. Affected is the function fromRouteStatic of the file /goform/RouteStatic. E... |
| CVE-2026-5460 | MEDIUM | 6.5 | 0.3% | Apr 10, 2026 | A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare processing. In the err... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now