2026 CVE Vulnerabilities
45,125 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-13347 | HIGH | 7.5 | 0.5% | Jul 10, 2026 | The Hide My WP Lite plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 1.3 via th... |
| CVE-2026-12685 | HIGH | 7.5 | 0.1% | Jul 10, 2026 | The EscortWP escortwp WordPress theme through 3.6.2 was distributed with a vendor-authored, obfuscated backdoor that let... |
| CVE-2026-21055 | HIGH | 8.5 | 0.1% | Jul 10, 2026 | Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute a... |
| CVE-2026-21049 | HIGH | 8.4 | 0.1% | Jul 10, 2026 | Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary co... |
| CVE-2026-21048 | HIGH | 8.3 | 0.4% | Jul 10, 2026 | Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote ... |
| CVE-2026-21046 | HIGH | 8.4 | 0.1% | Jul 10, 2026 | Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privil... |
| CVE-2026-21045 | HIGH | 8.3 | 0.4% | Jul 10, 2026 | Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote... |
| CVE-2026-21042 | HIGH | 8.4 | 0.1% | Jul 10, 2026 | Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code. |
| CVE-2026-15330 | HIGH | 7.3 | 0.4% | Jul 10, 2026 | A vulnerability was determined in zhayujie CowAgent up to 2.1.1. Impacted is the function _build_image_content/_download... |
| CVE-2026-15298 | HIGH | 7.2 | 0.3% | Jul 10, 2026 | The TelSender plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting in all versions up to, and including,... |
| CVE-2026-15293 | HIGH | 8 | 0.3% | Jul 10, 2026 | The WP Business Intelligence Lite plugin for WordPress is vulnerable to authorization bypass in all versions up to, and ... |
| CVE-2026-15291 | HIGH | 7.5 | 0.5% | Jul 10, 2026 | The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all ... |
| CVE-2026-15290 | HIGH | 7.5 | 0.4% | Jul 10, 2026 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi... |
| CVE-2026-15288 | HIGH | 7.5 | 0.3% | Jul 10, 2026 | The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation... |
| CVE-2026-54423 | HIGH | 8.2 | 0.5% | Jul 10, 2026 | In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface c... |
| CVE-2026-15070 | HIGH | 8.8 | 0.3% | Jul 10, 2026 | The Salon Booking System – Free Version plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions... |
| CVE-2026-13430 | HIGH | 7.2 | 0.6% | Jul 10, 2026 | The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and... |
| CVE-2026-15319 | HIGH | 7.3 | 0.3% | Jul 10, 2026 | A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. This affects the function IPAllowlist of the ... |
| CVE-2026-54771 | HIGH | 8.1 | 0.4% | Jul 10, 2026 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.3, a Langroid appl... |
| CVE-2026-50181 | HIGH | 7.1 | 0.2% | Jul 10, 2026 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, Langroid's `Rea... |
| CVE-2026-50180 | HIGH | 8.7 | 0.7% | Jul 10, 2026 | Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, `SQLChatAgent` ... |
| CVE-2026-12598 | HIGH | 8.1 | 0.3% | Jul 10, 2026 | The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in versions up to and including 6.2.3 via... |
| CVE-2026-12597 | HIGH | 8.1 | 0.4% | Jul 10, 2026 | The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions... |
| CVE-2026-12595 | HIGH | 8.1 | 0.3% | Jul 10, 2026 | The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via Unverified OAuth Email in all version... |
| CVE-2026-59858 | HIGH | 7.8 | 0.1% | Jul 9, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/cco... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now