2026 CVE Vulnerabilities
65,684 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-39381 | MEDIUM | 4.3 | 0.2% | Apr 7, 2026 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.8.0-a... |
| CVE-2026-39380 | MEDIUM | 5.4 | 0.2% | Apr 7, 2026 | Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to ... |
| CVE-2026-39376 | HIGH | 7.5 | 0.3% | Apr 7, 2026 | FastFeedParser is a high performance RSS, Atom and RDF parser. Prior to 0.5.10, when parse() fetches a URL that returns ... |
| CVE-2026-39374 | HIGH | 7.7 | 0.2% | Apr 7, 2026 | Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project mem... |
| CVE-2026-39373 | MEDIUM | 5.3 | 0.3% | Apr 7, 2026 | JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attac... |
| CVE-2026-39371 | HIGH | 8.1 | 0.2% | Apr 7, 2026 | RedwoodSDK is a server-first React framework. From 1.0.0-beta.50 to 1.0.5, erver functions exported from "use server" fi... |
| CVE-2026-39370 | HIGH | 7.1 | 0.2% | Apr 7, 2026 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, objects/aVideoEncoder.json.php still allows at... |
| CVE-2026-39369 | HIGH | 7.6 | 0.4% | Apr 7, 2026 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, objects/aVideoEncoderReceiveImage.json.php all... |
| CVE-2026-39368 | MEDIUM | 6.5 | 0.2% | Apr 7, 2026 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the Live restream log callback flow accepted a... |
| CVE-2026-39367 | MEDIUM | 5.4 | 0.2% | Apr 7, 2026 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's EPG (Electronic Program Guide) featur... |
| CVE-2026-39366 | MEDIUM | 6.5 | 0.2% | Apr 7, 2026 | WWBN AVideo is an open source video platform. In versions 26.0 and prior, the PayPal IPN v1 handler at plugin/PayPalYPT/... |
| CVE-2026-39365 | MEDIUM | 5.3 | 0.9% | Apr 7, 2026 | Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, the dev server’s hand... |
| CVE-2026-39364 | HIGH | 7.5 | 2.1% | Apr 7, 2026 | Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite dev server, files... |
| CVE-2026-39363 | HIGH | 7.5 | 3.3% | Apr 7, 2026 | Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, if it is possible to ... |
| CVE-2026-39361 | HIGH | 7.7 | 0.3% | Apr 7, 2026 | OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validate_enrichment_url function in src... |
| CVE-2026-39356 | HIGH | 7.5 | 0.4% | Apr 7, 2026 | Drizzle is a modern TypeScript ORM. Prior to 0.45.2 and 1.0.0-beta.20, Drizzle ORM improperly escaped quoted SQL identif... |
| CVE-2026-39322 | HIGH | 8.8 | 0.2% | Apr 7, 2026 | PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, POST /api/v1/auth/sign-in creates... |
| CVE-2026-32864 | HIGH | 8.5 | 0.1% | Apr 7, 2026 | There is a memory corruption vulnerability due to an out-of-bounds read in mgcore_SH_25_3!aligned_free() in NI LabVIEW. ... |
| CVE-2026-32863 | HIGH | 8.5 | 0.2% | Apr 7, 2026 | There is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation() in... |
| CVE-2026-32862 | HIGH | 8.5 | 0.1% | Apr 7, 2026 | There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabV... |
| CVE-2026-32861 | HIGH | 8.5 | 0.2% | Apr 7, 2026 | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVCLASS file in NI Lab... |
| CVE-2026-32860 | HIGH | 8.5 | 0.2% | Apr 7, 2026 | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVI... |
| CVE-2026-5762 | MEDIUM | 5.3 | 0.3% | Apr 7, 2026 | Allocation of resources without limits or throttling vulnerability in Wikimedia Foundation MediaWiki - ReportIncident Ex... |
| CVE-2026-5736 | HIGH | 7.3 | 0.3% | Apr 7, 2026 | A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-serve... |
| CVE-2026-39360 | MEDIUM | 4.3 | 0.2% | Apr 7, 2026 | RustFS is a distributed object storage system built in Rust. Prior to alpha.90, RustFS contains a missing authorization ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now