2026 CVE Vulnerabilities
66,307 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-33404 | MEDIUM | 6.1 | 0.1% | Apr 6, 2026 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking applic... |
| CVE-2026-33403 | MEDIUM | 6.1 | 0.2% | Apr 6, 2026 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking applic... |
| CVE-2026-32602 | MEDIUM | 4.2 | 0.1% | Apr 6, 2026 | Homarr is an open-source dashboard. Prior to 1.57.0, the user registration endpoint (/api/trpc/user.register) is vulnera... |
| CVE-2026-31153 | MEDIUM | 5.4 | 0.1% | Apr 6, 2026 | A stored cross-site scripting (XSS) vulnerability in Bynder before 12 January 2026 allows attackers to execute arbitrary... |
| CVE-2026-31151 | CRITICAL | 9.8 | 0.4% | Apr 6, 2026 | An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the appl... |
| CVE-2026-31150 | MEDIUM | 4.3 | 0.2% | Apr 6, 2026 | Incorrect access control in Kaleris YMS v7.2.2.1 allows authenticated attackers with only the shipping/receiving role to... |
| CVE-2026-31067 | MEDIUM | 6.8 | 0.5% | Apr 6, 2026 | A remote command execution (RCE) vulnerability in the /goform/formReleaseConnect component of UTT Aggressive 520W v3v1.7... |
| CVE-2026-31066 | MEDIUM | 4.5 | 0.2% | Apr 6, 2026 | UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of th... |
| CVE-2026-31065 | MEDIUM | 4.5 | 0.2% | Apr 6, 2026 | UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formC... |
| CVE-2026-31063 | MEDIUM | 4.5 | 0.2% | Apr 6, 2026 | UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the form... |
| CVE-2026-31062 | MEDIUM | 4.5 | 0.2% | Apr 6, 2026 | UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtp... |
| CVE-2026-31061 | MEDIUM | 4.5 | 0.2% | Apr 6, 2026 | UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ... |
| CVE-2026-31060 | MEDIUM | 4.5 | 0.2% | Apr 6, 2026 | UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the form... |
| CVE-2026-31059 | CRITICAL | 9.8 | 0.9% | Apr 6, 2026 | A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-18... |
| CVE-2026-31058 | MEDIUM | 4.5 | 0.2% | Apr 6, 2026 | UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of ... |
| CVE-2026-31053 | MEDIUM | 6.2 | 0.1% | Apr 6, 2026 | A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing m... |
| CVE-2026-29047 | HIGH | 8.8 | 0.4% | Apr 6, 2026 | GLPI is a free asset and IT management software package. From 10.0.0 to before 10.0.24 and 11.0.6, an authenticated user... |
| CVE-2026-26263 | CRITICAL | 9.8 | 8.7% | Apr 6, 2026 | GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated time-based bli... |
| CVE-2026-26027 | MEDIUM | 6.1 | 0.2% | Apr 6, 2026 | GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, an unauthenticated user can store... |
| CVE-2026-26026 | HIGH | 7.2 | 0.4% | Apr 6, 2026 | GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template injection by an administ... |
| CVE-2026-25932 | MEDIUM | 4.8 | 0.3% | Apr 6, 2026 | GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user c... |
| CVE-2026-5660 | MEDIUM | 6.3 | 0.2% | Apr 6, 2026 | A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown fu... |
| CVE-2026-5659 | MEDIUM | 6.3 | 0.3% | Apr 6, 2026 | A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie._... |
| CVE-2026-30078 | HIGH | 7.5 | 0.3% | Apr 6, 2026 | OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. Fo... |
| CVE-2026-3524 | HIGH | 8.8 | 0.4% | Apr 6, 2026 | Mattermost Plugin Legal Hold versions <=1.1.4 fail to halt request processing after a failed authorization check in Serv... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now