2026 CVE Vulnerabilities
65,754 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-35043 | HIGH | 7.8 | 0.3% | Apr 6, 2026 | BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.... |
| CVE-2026-30613 | MEDIUM | 4.6 | 0.2% | Apr 6, 2026 | An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Ver... |
| CVE-2026-5670 | MEDIUM | 6.3 | 0.2% | Apr 6, 2026 | A vulnerability was found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This is... |
| CVE-2026-5669 | HIGH | 7.3 | 0.3% | Apr 6, 2026 | A vulnerability has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. Th... |
| CVE-2026-5668 | LOW | 2.4 | 0.2% | Apr 6, 2026 | A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affect... |
| CVE-2026-35042 | HIGH | 7.5 | 0.2% | Apr 6, 2026 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, fast-jwt does not validate the crit (C... |
| CVE-2026-35039 | CRITICAL | 9.1 | 0.2% | Apr 6, 2026 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 0.0.1 to before 6.2.0, setting up a custom cacheKeyBuil... |
| CVE-2026-35037 | HIGH | 7.2 | 0.3% | Apr 6, 2026 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to 4.2.8, the GET /api/website/... |
| CVE-2026-35036 | HIGH | 7.5 | 0.3% | Apr 6, 2026 | Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to 4.2.8, Ech0 implements link ... |
| CVE-2026-35035 | CRITICAL | 9 | 0.5% | Apr 6, 2026 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati... |
| CVE-2026-35030 | CRITICAL | 9.4 | 0.5% | Apr 6, 2026 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authenti... |
| CVE-2026-35029 | HIGH | 8.8 | 26.4% | Apr 6, 2026 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/updat... |
| CVE-2026-34992 | HIGH | 7.5 | 0.1% | Apr 6, 2026 | Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to 2.4.5 and 2.5.2, a missing encrypt... |
| CVE-2026-34989 | CRITICAL | 9 | 0.3% | Apr 6, 2026 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati... |
| CVE-2026-34986 | HIGH | 7.5 | 0.7% | Apr 6, 2026 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup... |
| CVE-2026-34981 | MEDIUM | 5.8 | 0.3% | Apr 6, 2026 | The whisperX API is a tool for enhancing and analyzing audio content. From 0.3.1 to 0.5.0, FileService.download_from_url... |
| CVE-2026-34977 | CRITICAL | 9.8 | 0.8% | Apr 6, 2026 | Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, when uploading a JPEG, a user ... |
| CVE-2026-34976 | CRITICAL | 10 | 0.5% | Apr 6, 2026 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant admin mutation is missing from... |
| CVE-2026-34975 | MEDIUM | 4.3 | 0.2% | Apr 6, 2026 | Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability wa... |
| CVE-2026-34841 | CRITICAL | 9.8 | 0.2% | Apr 6, 2026 | Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack ... |
| CVE-2026-34783 | HIGH | 8.1 | 0.5% | Apr 6, 2026 | Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4, a path traversal vulnerability in Ferr... |
| CVE-2026-31313 | MEDIUM | 5.4 | 0.1% | Apr 6, 2026 | An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allo... |
| CVE-2026-5704 | MEDIUM | 5.5 | 0.4% | Apr 6, 2026 | A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to ... |
| CVE-2026-5666 | MEDIUM | 5.5 | 0.3% | Apr 6, 2026 | A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionalit... |
| CVE-2026-5665 | HIGH | 7.3 | 0.3% | Apr 6, 2026 | A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now