2026 CVE Vulnerabilities

68,985 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-32393HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-32392HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-32391MEDIUM5.4Missing Authorization vulnerability in linethemes SmartFix smartfix allows Exploiting Incorrectly Configured Access Cont...
CVE-2026-32390MEDIUM5.4Missing Authorization vulnerability in linethemes Nanosoft nanosoft allows Exploiting Incorrectly Configured Access Cont...
CVE-2026-32388MEDIUM5.4Missing Authorization vulnerability in linethemes GLB glb allows Exploiting Incorrectly Configured Access Control Securi...
CVE-2026-32387MEDIUM5.3Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorrectly C...
CVE-2026-32386MEDIUM4.3Missing Authorization vulnerability in EnvoThemes Envo Extra envo-extra allows Exploiting Incorrectly Configured Access ...
CVE-2026-32385MEDIUM5.4Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-mana...
CVE-2026-32384HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-32383MEDIUM5.3Missing Authorization vulnerability in raratheme Ridhi ridhi allows Exploiting Incorrectly Configured Access Control Sec...
CVE-2026-32382MEDIUM5.3Missing Authorization vulnerability in raratheme Digital Download digital-download allows Exploiting Incorrectly Configu...
CVE-2026-32381MEDIUM5.3Missing Authorization vulnerability in raratheme App Landing Page app-landing-page allows Exploiting Incorrectly Configu...
CVE-2026-32380MEDIUM5.3Missing Authorization vulnerability in raratheme Numinous numinous allows Exploiting Incorrectly Configured Access Contr...
CVE-2026-32379MEDIUM5.3Missing Authorization vulnerability in raratheme Rara Academic rara-academic allows Exploiting Incorrectly Configured Ac...
CVE-2026-32378MEDIUM5.3Missing Authorization vulnerability in raratheme Book Landing Page book-landing-page allows Exploiting Incorrectly Confi...
CVE-2026-32377MEDIUM5.3Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting Incorrectly Configured ...
CVE-2026-32376MEDIUM5.3Missing Authorization vulnerability in raratheme Kalon kalon allows Exploiting Incorrectly Configured Access Control Sec...
CVE-2026-32375MEDIUM5.3Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Configured ...
CVE-2026-32374MEDIUM5.3Missing Authorization vulnerability in raratheme The Minimal the-minimal allows Exploiting Incorrectly Configured Access...
CVE-2026-32373MEDIUM5.4Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly...
CVE-2026-32372MEDIUM5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – El...
CVE-2026-32371MEDIUM5.3Missing Authorization vulnerability in raratheme Elegant Pink elegant-pink allows Exploiting Incorrectly Configured Acce...
CVE-2026-32370MEDIUM5.3Missing Authorization vulnerability in raratheme Influencer influencer allows Exploiting Incorrectly Configured Access C...
CVE-2026-32369HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-32368HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in delphiknight Geo t...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now