2026 CVE Vulnerabilities
67,045 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-5130 | HIGH | 8.8 | 0.4% | Mar 30, 2026 | The Debugger & Troubleshooter plugin for WordPress was vulnerable to Unauthenticated Privilege Escalation in versions up... |
| CVE-2026-5153 | HIGH | 8.8 | 3.0% | Mar 30, 2026 | A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/Wr... |
| CVE-2026-4257 | CRITICAL | 9.8 | 41.5% | Mar 30, 2026 | The Contact Form by Supsystic plugin for WordPress is vulnerable to Server-Side Template Injection (SSTI) leading to Rem... |
| CVE-2026-33995 | MEDIUM | 5.3 | 0.3% | Mar 30, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a double-free vulnerability in... |
| CVE-2026-33987 | MEDIUM | 6.6 | 0.1% | Mar 30, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in persistent_cache_read_entry... |
| CVE-2026-33986 | HIGH | 7.5 | 0.3% | Mar 30, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuv_ensure_buffer() in libf... |
| CVE-2026-33985 | HIGH | 7.1 | 0.2% | Mar 30, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap ... |
| CVE-2026-33984 | HIGH | 7.5 | 0.4% | Mar 30, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in resize_vbar_entry() in libf... |
| CVE-2026-33983 | MEDIUM | 6.5 | 0.4% | Mar 30, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressive_decompress_tile_up... |
| CVE-2026-33982 | HIGH | 8.1 | 0.2% | Mar 30, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflo... |
| CVE-2026-33977 | MEDIUM | 6.5 | 0.3% | Mar 30, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can cra... |
| CVE-2026-33952 | MEDIUM | 6.5 | 0.3% | Mar 30, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated auth_length fie... |
| CVE-2026-32794 | MEDIUM | 4.8 | 0.4% | Mar 30, 2026 | Improper Certificate Validation vulnerability in Apache Airflow Provider for Databricks. Provider code did not validate ... |
| CVE-2026-5152 | HIGH | 8.8 | 0.7% | Mar 30, 2026 | A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/crea... |
| CVE-2026-4789 | CRITICAL | 9.8 | 0.7% | Mar 30, 2026 | Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions. |
| CVE-2026-34558 | CRITICAL | 9 | 0.3% | Mar 30, 2026 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati... |
| CVE-2026-34557 | CRITICAL | 9 | 0.3% | Mar 30, 2026 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati... |
| CVE-2026-32884 | MEDIUM | 5.9 | 0.2% | Mar 30, 2026 | Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name ... |
| CVE-2026-32883 | MEDIUM | 5.9 | 0.2% | Mar 30, 2026 | Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP resp... |
| CVE-2026-32877 | HIGH | 8.2 | 0.3% | Mar 30, 2026 | Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that c... |
| CVE-2026-32696 | HIGH | 7.5 | 0.4% | Mar 30, 2026 | NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In NanoMQ version 0.24.6, after enabling auth.http... |
| CVE-2026-31946 | CRITICAL | 9.8 | 0.2% | Mar 30, 2026 | OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication. From vers... |
| CVE-2026-30313 | CRITICAL | 9.8 | 1.1% | Mar 30, 2026 | DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitel... |
| CVE-2026-30308 | CRITICAL | 9.8 | 0.5% | Mar 30, 2026 | In its design for automatic terminal command execution, HAI Build Code Generator offers two options: Execute safe comman... |
| CVE-2026-30306 | CRITICAL | 9.8 | 0.7% | Mar 30, 2026 | In its design for automatic terminal command execution, SakaDev offers two options: Execute safe commands and execute al... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now