2026 CVE Vulnerabilities
65,813 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-34217 | HIGH | 7.2 | 0.3% | Apr 6, 2026 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, a scope modification vulnerability exists in @nyariv/sand... |
| CVE-2026-34211 | HIGH | 7.5 | 0.4% | Apr 6, 2026 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, the @nyariv/sandboxjs parser contains unbounded recursion... |
| CVE-2026-34208 | CRITICAL | 10 | 0.6% | Apr 6, 2026 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, SandboxJS blocks direct assignment to global objects (for... |
| CVE-2026-34148 | HIGH | 7.5 | 0.6% | Apr 6, 2026 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to 1.9.6, 1.10.5, 2.0.8,... |
| CVE-2026-33752 | HIGH | 8.6 | 0.5% | Apr 6, 2026 | curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict requests to internal IP ranges,... |
| CVE-2026-33727 | MEDIUM | 6.7 | 0.2% | Apr 6, 2026 | Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Version 6.4 has a local privil... |
| CVE-2026-33405 | MEDIUM | 4.8 | 0.2% | Apr 6, 2026 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking applic... |
| CVE-2026-31354 | MEDIUM | 5.4 | 0.2% | Apr 6, 2026 | Multiple authenticated stored cross-site scripting (XSS) vulnerabilities in the Permissions module of Feehi CMS v2.1.1 a... |
| CVE-2026-31353 | MEDIUM | 5.4 | 0.2% | Apr 6, 2026 | An authenticated stored cross-site scripting (XSS) vulnerability in the Category module of Feehi CMS v2.1.1 allows attac... |
| CVE-2026-31352 | MEDIUM | 5.4 | 0.2% | Apr 6, 2026 | An authenticated stored cross-site scripting (XSS) vulnerability in the Role Management module of Feehi CMS v2.1.1 allow... |
| CVE-2026-31351 | MEDIUM | 4.8 | 0.2% | Apr 6, 2026 | An authenticated stored cross-site scripting (XSS) vulnerability in the creation/editing module of Feehi CMS v2.1.1 allo... |
| CVE-2026-31350 | MEDIUM | 5.4 | 0.2% | Apr 6, 2026 | An authenticated stored cross-site scripting (XSS) vulnerability in Feehi CMS v2.1.1 allows attackers to execute arbitra... |
| CVE-2026-21382 | HIGH | 7.8 | 0.1% | Apr 6, 2026 | Memory Corruption when handling power management requests with improperly sized input/output buffers. |
| CVE-2026-21381 | HIGH | 7.5 | 0.1% | Apr 6, 2026 | Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood aware... |
| CVE-2026-21380 | HIGH | 7.8 | 0.1% | Apr 6, 2026 | Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory. |
| CVE-2026-21378 | HIGH | 7.8 | 0.1% | Apr 6, 2026 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor... |
| CVE-2026-21376 | HIGH | 7.8 | 0.1% | Apr 6, 2026 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor... |
| CVE-2026-21375 | HIGH | 7.8 | 0.1% | Apr 6, 2026 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. |
| CVE-2026-21374 | HIGH | 7.8 | 0.1% | Apr 6, 2026 | Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validatio... |
| CVE-2026-21373 | HIGH | 7.8 | 0.1% | Apr 6, 2026 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. |
| CVE-2026-21372 | HIGH | 7.8 | 0.1% | Apr 6, 2026 | Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations. |
| CVE-2026-21371 | HIGH | 7.8 | 0.1% | Apr 6, 2026 | Memory Corruption when retrieving output buffer with insufficient size validation. |
| CVE-2026-21367 | HIGH | 7.5 | 0.2% | Apr 6, 2026 | Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans. |
| CVE-2026-5664 | — | — | — | Apr 6, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-30078. Reason: This candidate is a ... |
| CVE-2026-5663 | CRITICAL | 9.8 | 1.7% | Apr 6, 2026 | A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEn... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now