2026 CVE Vulnerabilities
68,730 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23260 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: regmap: maple: free entry on mas_store_gfp() failur... |
| CVE-2026-23259 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: free potentially allocated iovec on ca... |
| CVE-2026-23258 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before que... |
| CVE-2026-23257 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in PF setup_nic... |
| CVE-2026-23256 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fix off-by-one error in VF setup_nic... |
| CVE-2026-23255 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: add proper RCU protection to /proc/net/ptype ... |
| CVE-2026-23254 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO com... |
| CVE-2026-23253 | HIGH | 7.8 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of ring... |
| CVE-2026-23252 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls The x... |
| CVE-2026-23251 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: xfs: only call xf{array,blob}_destroy if we have a ... |
| CVE-2026-23250 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: xfs: check return value of xchk_scrub_create_subord... |
| CVE-2026-23249 | MEDIUM | 5.5 | 0.1% | Mar 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: xfs: check for deleted cursors when revalidating tw... |
| CVE-2026-32610 | HIGH | 8.1 | 0.3% | Mar 18, 2026 | Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, the Glances REST API web server... |
| CVE-2026-30695 | MEDIUM | 6.1 | 0.2% | Mar 18, 2026 | A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access con... |
| CVE-2026-30345 | HIGH | 7.5 | 0.4% | Mar 18, 2026 | A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitra... |
| CVE-2026-1463 | HIGH | 8.8 | 0.5% | Mar 18, 2026 | The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclu... |
| CVE-2026-3090 | HIGH | 7.2 | 0.2% | Mar 18, 2026 | The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin... |
| CVE-2026-33004 | MEDIUM | 4.3 | 0.2% | Mar 18, 2026 | Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, incre... |
| CVE-2026-33003 | MEDIUM | 4.3 | 0.1% | Mar 18, 2026 | Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins co... |
| CVE-2026-33002 | HIGH | 7.5 | 0.3% | Mar 18, 2026 | Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validatio... |
| CVE-2026-33001 | HIGH | 8.8 | 1.1% | Mar 18, 2026 | Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar a... |
| CVE-2026-2992 | HIGH | 8.2 | 0.2% | Mar 18, 2026 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due t... |
| CVE-2026-2991 | HIGH | 7.3 | 0.4% | Mar 18, 2026 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in a... |
| CVE-2026-2559 | MEDIUM | 5.3 | 0.2% | Mar 18, 2026 | The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check ... |
| CVE-2026-2512 | MEDIUM | 6.4 | 0.2% | Mar 18, 2026 | The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in all ver... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now