2026 CVE Vulnerabilities
45,138 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-57856 | HIGH | 8.8 | 0.4% | Jul 13, 2026 | Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() meth... |
| CVE-2026-57855 | HIGH | 8.8 | 0.3% | Jul 13, 2026 | Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api... |
| CVE-2026-62328 | HIGH | 8.7 | 0.4% | Jul 13, 2026 | 9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attack... |
| CVE-2026-62242 | HIGH | 8.6 | 0.3% | Jul 13, 2026 | Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated a... |
| CVE-2026-62240 | HIGH | 8.3 | 0.3% | Jul 13, 2026 | CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one... |
| CVE-2026-62200 | HIGH | 8.8 | 0.3% | Jul 13, 2026 | OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport t... |
| CVE-2026-62199 | HIGH | 8.8 | 0.3% | Jul 13, 2026 | OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup va... |
| CVE-2026-62197 | HIGH | 8.5 | 0.2% | Jul 13, 2026 | OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket ... |
| CVE-2026-62196 | HIGH | 8.7 | 0.2% | Jul 13, 2026 | OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can s... |
| CVE-2026-62195 | HIGH | 8.7 | 0.2% | Jul 13, 2026 | OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature th... |
| CVE-2026-62194 | HIGH | 8.8 | 0.3% | Jul 13, 2026 | OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that... |
| CVE-2026-62192 | HIGH | 8.1 | 0.2% | Jul 13, 2026 | OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that a... |
| CVE-2026-62191 | HIGH | 7.1 | 0.2% | Jul 13, 2026 | OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in message mutation handling th... |
| CVE-2026-62190 | HIGH | 8.8 | 0.3% | Jul 13, 2026 | OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-t... |
| CVE-2026-62189 | HIGH | 7.6 | 0.3% | Jul 13, 2026 | OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower... |
| CVE-2026-62188 | HIGH | 8.6 | 0.2% | Jul 13, 2026 | OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Fe... |
| CVE-2026-62187 | HIGH | 8.6 | 0.2% | Jul 13, 2026 | OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A low... |
| CVE-2026-62186 | HIGH | 7.6 | 0.2% | Jul 13, 2026 | OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model override... |
| CVE-2026-62185 | HIGH | 8.6 | 0.3% | Jul 13, 2026 | Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access r... |
| CVE-2026-62184 | HIGH | 8.7 | 0.4% | Jul 13, 2026 | luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log ... |
| CVE-2026-61458 | HIGH | 8.7 | 0.3% | Jul 13, 2026 | PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-... |
| CVE-2026-58500 | HIGH | 8.2 | 0.3% | Jul 13, 2026 | MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on Android and iOS. In... |
| CVE-2026-58411 | HIGH | 7 | 0.3% | Jul 13, 2026 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, Cross-Site Scripting (XSS) vulnerabilities... |
| CVE-2026-51539 | HIGH | 7.5 | 0.3% | Jul 13, 2026 | A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. The issu... |
| CVE-2026-39042 | HIGH | 7.5 | 0.4% | Jul 13, 2026 | An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now