2026 CVE Vulnerabilities
66,494 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-34831 | MEDIUM | 6.5 | 0.1% | Apr 2, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Files#fail sets the Cont... |
| CVE-2026-34830 | HIGH | 7.5 | 0.2% | Apr 2, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Sendfile#map_accel_path ... |
| CVE-2026-34829 | HIGH | 7.5 | 0.4% | Apr 2, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser only w... |
| CVE-2026-34826 | HIGH | 7.5 | 0.4% | Apr 2, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.get_byte_ranges pa... |
| CVE-2026-34786 | MEDIUM | 5.3 | 0.2% | Apr 2, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static#applicable_rules ... |
| CVE-2026-34785 | HIGH | 7.5 | 0.4% | Apr 2, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Static determines whethe... |
| CVE-2026-34763 | MEDIUM | 5.3 | 0.2% | Apr 2, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Directory interpolates t... |
| CVE-2026-34230 | HIGH | 7.5 | 0.4% | Apr 2, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Utils.select_best_encodi... |
| CVE-2026-34083 | MEDIUM | 6.1 | 0.1% | Apr 2, 2026 | Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0, SignalK Server co... |
| CVE-2026-33951 | HIGH | 7.5 | 0.3% | Apr 2, 2026 | Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0-beta.1, the Signal... |
| CVE-2026-33950 | CRITICAL | 9.4 | 0.4% | Apr 2, 2026 | Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0-beta.4, there is a... |
| CVE-2026-30603 | MEDIUM | 6.8 | 0.1% | Apr 2, 2026 | An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, ... |
| CVE-2026-26961 | MEDIUM | 5.3 | 0.3% | Apr 2, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Multipart::Parser extrac... |
| CVE-2026-26895 | MEDIUM | 5.3 | 0.3% | Apr 2, 2026 | User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames ... |
| CVE-2026-25212 | CRITICAL | 9.9 | 0.3% | Apr 2, 2026 | An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileg... |
| CVE-2026-5351 | HIGH | 8.8 | 4.5% | Apr 2, 2026 | A weakness has been identified in Trendnet TEW-657BRM 1.00.1. This affects the function add_wps_client of the file /setu... |
| CVE-2026-5350 | HIGH | 8.8 | 0.8% | Apr 2, 2026 | A security flaw has been discovered in Trendnet TEW-657BRM 1.00.1. The impacted element is the function update_pcdb of t... |
| CVE-2026-5349 | HIGH | 8.8 | 0.8% | Apr 2, 2026 | A vulnerability was identified in Trendnet TEW-657BRM 1.00.1. The affected element is the function add_apcdb of the file... |
| CVE-2026-34876 | HIGH | 7.5 | 0.4% | Apr 2, 2026 | An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in lib... |
| CVE-2026-33746 | CRITICAL | 9.8 | 0.3% | Apr 2, 2026 | Convoy is a KVM server management panel for hosting businesses. From version 3.9.0-beta to before version 4.5.1, the JWT... |
| CVE-2026-33691 | HIGH | 7.5 | 3.6% | Apr 2, 2026 | The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewal... |
| CVE-2026-30332 | HIGH | 7.5 | 0.2% | Apr 2, 2026 | A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows... |
| CVE-2026-5346 | HIGH | 7.3 | 0.3% | Apr 2, 2026 | A vulnerability was determined in huimeicloud hm_editor up to 2.2.3. Impacted is the function client.get of the file src... |
| CVE-2026-5344 | MEDIUM | 6.3 | 0.3% | Apr 2, 2026 | A security vulnerability has been detected in Textpattern up to 4.9.1. Affected by this vulnerability is the function mt... |
| CVE-2026-5342 | MEDIUM | 5.5 | 0.7% | Apr 2, 2026 | A flaw has been found in LibRaw up to 0.22.0. This affects the function LibRaw::nikon_load_padded_packed_raw of the file... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now