2026 CVE Vulnerabilities
67,717 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-30695 | MEDIUM | 6.1 | 0.2% | Mar 18, 2026 | A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access con... |
| CVE-2026-30345 | HIGH | 7.5 | 0.4% | Mar 18, 2026 | A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitra... |
| CVE-2026-1463 | HIGH | 8.8 | 0.5% | Mar 18, 2026 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclu... |
| CVE-2026-3090 | HIGH | 7.2 | 0.2% | Mar 18, 2026 | The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin... |
| CVE-2026-33004 | MEDIUM | 4.3 | 0.2% | Mar 18, 2026 | Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, incre... |
| CVE-2026-33003 | MEDIUM | 4.3 | 0.1% | Mar 18, 2026 | Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins co... |
| CVE-2026-33002 | HIGH | 7.5 | 0.3% | Mar 18, 2026 | Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validatio... |
| CVE-2026-33001 | HIGH | 8.8 | 1.1% | Mar 18, 2026 | Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar a... |
| CVE-2026-2992 | HIGH | 8.2 | 0.2% | Mar 18, 2026 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due t... |
| CVE-2026-2991 | HIGH | 7.3 | 0.4% | Mar 18, 2026 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in a... |
| CVE-2026-2559 | MEDIUM | 5.3 | 0.2% | Mar 18, 2026 | The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check ... |
| CVE-2026-2512 | MEDIUM | 6.4 | 0.2% | Mar 18, 2026 | The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in all ver... |
| CVE-2026-24063 | HIGH | 8.2 | 0.1% | Mar 18, 2026 | When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a ... |
| CVE-2026-24062 | HIGH | 7.8 | 0.1% | Mar 18, 2026 | The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signatu... |
| CVE-2026-32609 | HIGH | 7.5 | 0.5% | Mar 18, 2026 | Glances is an open-source system cross-platform monitoring tool. The GHSA-gh4x fix (commit 5d3de60) addressed unauthenti... |
| CVE-2026-3278 | MEDIUM | 6.1 | 0.1% | Mar 18, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks... |
| CVE-2026-32694 | MEDIUM | 6.6 | 0.3% | Mar 18, 2026 | In Juju from version 3.0.0 through 3.6.18, when a secret owner grants permissions to a secret to a grantee, the secret o... |
| CVE-2026-25449 | CRITICAL | 9.8 | 0.3% | Mar 18, 2026 | Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue affec... |
| CVE-2026-32693 | HIGH | 8.8 | 0.3% | Mar 18, 2026 | In Juju from version 3.0.0 through 3.6.18, the authorization of the "secret-set" tool is not performed correctly, which ... |
| CVE-2026-32692 | MEDIUM | 6.5 | 0.2% | Mar 18, 2026 | An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18... |
| CVE-2026-32691 | MEDIUM | 5.3 | 0.2% | Mar 18, 2026 | A race condition in the secrets management subsystem of Juju versions 3.0.0 through 3.6.18 allows an authenticated unit ... |
| CVE-2026-33265 | CRITICAL | 9 | 0.2% | Mar 18, 2026 | In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API. |
| CVE-2026-23248 | HIGH | 7.8 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF in pe... |
| CVE-2026-23247 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: tcp: secure_seq: add back ports to TS offset This ... |
| CVE-2026-23246 | HIGH | 8.8 | 0.3% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check link_id in ieee80211_m... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now