2026 CVE Vulnerabilities
45,110 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-52949 | MEDIUM | 5.5 | 0.2% | Jun 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on b... |
| CVE-2026-52948 | MEDIUM | 5.5 | 0.2% | Jun 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2C_TIMEOUT i... |
| CVE-2026-50712 | MEDIUM | 4.8 | 0.2% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50711 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50710 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to unsafe evaluation... |
| CVE-2026-50709 | MEDIUM | 4.8 | 0.2% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50708 | MEDIUM | 4.8 | 0.2% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50705 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization ... |
| CVE-2026-50704 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50703 | MEDIUM | 4.8 | 0.2% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50701 | MEDIUM | 5.1 | 0.3% | Jun 24, 2026 | A Reflected Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutr... |
| CVE-2026-50700 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-50699 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev. An authenticated attack... |
| CVE-2026-50698 | MEDIUM | 4.6 | 0.3% | Jun 24, 2026 | A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutrali... |
| CVE-2026-11878 | MEDIUM | 6.1 | 0.2% | Jun 24, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Ma... |
| CVE-2026-57307 | MEDIUM | 4.2 | 0.1% | Jun 24, 2026 | A missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allows attackers with Ove... |
| CVE-2026-57306 | MEDIUM | 4.2 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier al... |
| CVE-2026-57305 | MEDIUM | 5.4 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect... |
| CVE-2026-57304 | MEDIUM | 5.4 | 0.2% | Jun 24, 2026 | A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/Read permission to c... |
| CVE-2026-57302 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller,... |
| CVE-2026-57300 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read... |
| CVE-2026-57299 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers wi... |
| CVE-2026-57298 | MEDIUM | 5.4 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and ea... |
| CVE-2026-57297 | MEDIUM | 4.3 | 0.2% | Jun 24, 2026 | A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers ... |
| CVE-2026-57295 | MEDIUM | 5.4 | 0.1% | Jun 24, 2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allow... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now