2026 CVE Vulnerabilities
67,222 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-4766 | MEDIUM | 6.4 | 0.2% | Mar 25, 2026 | The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post ... |
| CVE-2026-4783 | MEDIUM | 6.3 | 0.2% | Mar 25, 2026 | A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown functio... |
| CVE-2026-28895 | MEDIUM | 4.6 | 0.2% | Mar 25, 2026 | The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical... |
| CVE-2026-28894 | HIGH | 7.5 | 0.7% | Mar 25, 2026 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.4 and iPadOS 26.4,... |
| CVE-2026-28893 | LOW | 3.3 | 0.1% | Mar 25, 2026 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.4. A docu... |
| CVE-2026-28892 | MEDIUM | 5.5 | 0.2% | Mar 25, 2026 | A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.5, macOS So... |
| CVE-2026-28891 | HIGH | 8.1 | 0.1% | Mar 25, 2026 | A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.... |
| CVE-2026-28890 | MEDIUM | 5.5 | 0.1% | Mar 25, 2026 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able... |
| CVE-2026-28889 | MEDIUM | 6.2 | 0.1% | Mar 25, 2026 | A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to... |
| CVE-2026-28888 | MEDIUM | 5.1 | 0.2% | Mar 25, 2026 | A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 1... |
| CVE-2026-28886 | MEDIUM | 5.9 | 0.7% | Mar 25, 2026 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18... |
| CVE-2026-28882 | MEDIUM | 4 | 0.2% | Mar 25, 2026 | This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS ... |
| CVE-2026-28881 | MEDIUM | 5.5 | 0.2% | Mar 25, 2026 | A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Tahoe 26.4. An app may be able to a... |
| CVE-2026-28880 | MEDIUM | 6.5 | 0.8% | Mar 25, 2026 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS... |
| CVE-2026-28879 | MEDIUM | 6.5 | 0.4% | Mar 25, 2026 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.... |
| CVE-2026-28878 | MEDIUM | 6.5 | 0.9% | Mar 25, 2026 | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 ... |
| CVE-2026-28877 | MEDIUM | 5.5 | 0.2% | Mar 25, 2026 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9... |
| CVE-2026-28876 | HIGH | 7.5 | 0.5% | Mar 25, 2026 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in i... |
| CVE-2026-28875 | HIGH | 7.5 | 0.5% | Mar 25, 2026 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote... |
| CVE-2026-28874 | HIGH | 7.5 | 0.4% | Mar 25, 2026 | The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cau... |
| CVE-2026-28871 | MEDIUM | 4.3 | 0.3% | Mar 25, 2026 | A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS ... |
| CVE-2026-28870 | MEDIUM | 5.5 | 0.2% | Mar 25, 2026 | An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iO... |
| CVE-2026-28868 | MEDIUM | 5.5 | 0.2% | Mar 25, 2026 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.... |
| CVE-2026-28867 | MEDIUM | 6.2 | 0.2% | Mar 25, 2026 | This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and... |
| CVE-2026-28866 | MEDIUM | 6.2 | 0.2% | Mar 25, 2026 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now