2026 CVE Vulnerabilities
47,041 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1179 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | A vulnerability was detected in Yonyou KSOA 9.0. This affects an unknown part of the file /kmf/user_popedom.jsp of the c... |
| CVE-2026-23944 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to version 1.13.2, unauthent... |
| CVE-2026-23885 | CRITICAL | 9.9 | 0.4% | Jan 19, 2026 | Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3,... |
| CVE-2026-1178 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | A security vulnerability has been detected in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of t... |
| CVE-2026-1177 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | A weakness has been identified in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the fil... |
| CVE-2026-23837 | CRITICAL | 9.8 | 0.6% | Jan 19, 2026 | MyTube is a self-hosted downloader and player for several video websites. A vulnerability present in version 1.7.65 and ... |
| CVE-2026-1176 | CRITICAL | 9.8 | 0.3% | Jan 19, 2026 | A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the... |
| CVE-2026-23852 | CRITICAL | 9.6 | 0.7% | Jan 19, 2026 | SiYuan is a personal knowledge management system. Versions prior to 3.5.4 have a stored Cross-Site Scripting (XSS) vulne... |
| CVE-2026-23846 | CRITICAL | 9.1 | 0.4% | Jan 19, 2026 | Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password au... |
| CVE-2026-1173 | CRITICAL | 9.8 | 0.7% | Jan 19, 2026 | A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /g... |
| CVE-2026-23884 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leav... |
| CVE-2026-23883 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New` frees `cursor... |
| CVE-2026-23534 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer over... |
| CVE-2026-23533 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer over... |
| CVE-2026-22797 | CRITICAL | 9.9 | 0.6% | Jan 19, 2026 | An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, an... |
| CVE-2026-23532 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer over... |
| CVE-2026-23531 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec, when `glyphData... |
| CVE-2026-23530 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0,`freerdp_bitmap_decompress_plan... |
| CVE-2026-1162 | CRITICAL | 9.8 | 0.7% | Jan 19, 2026 | A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of the file /goform/set... |
| CVE-2026-1160 | CRITICAL | 9.8 | 0.3% | Jan 19, 2026 | A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown functio... |
| CVE-2026-1159 | CRITICAL | 9.8 | 0.3% | Jan 19, 2026 | A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This issue affects some unknown ... |
| CVE-2026-0610 | CRITICAL | 9.8 | 0.3% | Jan 19, 2026 | SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 thro... |
| CVE-2026-1181 | CRITICAL | 9 | 0.3% | Jan 19, 2026 | Altium 365 workspace endpoints were configured with an overly permissive Cross-Origin Resource Sharing (CORS) policy tha... |
| CVE-2026-1152 | CRITICAL | 9.8 | 0.3% | Jan 19, 2026 | A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown funct... |
| CVE-2026-1133 | CRITICAL | 9.8 | 0.5% | Jan 19, 2026 | A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.j... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now