2026 CVE Vulnerabilities
65,328 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-88355 | — | — | — | Sep 24, 2026 | An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in new_expr(). For arity-0 expressi... |
| CVE-2026-52001 | — | — | — | Sep 24, 2026 | An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE... |
| CVE-2026-88360 | — | — | — | Sep 24, 2026 | libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header l... |
| CVE-2026-97168 | — | — | — | Sep 24, 2026 | Rejected reason: it is a suggestion |
| CVE-2026-57168 | — | — | — | Sep 23, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-56120. Reason: This candidate is a ... |
| CVE-2026-57854 | — | — | — | Sep 23, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-53979 | — | — | — | Sep 23, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-53978 | — | — | — | Sep 23, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-53969 | — | — | — | Sep 23, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-53968 | — | — | — | Sep 23, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-55456 | — | — | — | Sep 23, 2026 | Rejected reason: This CVE is a duplicate of another CVE. |
| CVE-2026-18944 | — | — | — | Sep 23, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-18944. Reason: This candidate is a ... |
| CVE-2026-96559 | — | — | — | Sep 23, 2026 | Rejected reason: This ID was for testing |
| CVE-2026-89019 | — | — | — | Sep 22, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-88416 | — | — | 0.2% | Sep 22, 2026 | MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature. |
| CVE-2026-88350 | — | — | 0.2% | Sep 22, 2026 | An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_cstr_alloc() and mpack_node_utf8_cstr_alloc(). |
| CVE-2026-75432 | — | — | 0.2% | Sep 22, 2026 | An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::Po... |
| CVE-2026-76819 | — | — | — | Sep 22, 2026 | Rejected reason: Further research determined the issue results from a dependency. |
| CVE-2026-79311 | — | — | — | Sep 22, 2026 | webpy web.py 0.76 is vulnerable to Cross Site Scripting (XSS) via render_jinja.__init__(). |
| CVE-2026-95511 | — | — | 0.1% | Sep 22, 2026 | Rejected reason: Not a vulnerability. Creating a serial queue that overwrites cups-files.conf requires membership in Sys... |
| CVE-2026-88467 | — | — | 0.1% | Sep 21, 2026 | CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of va... |
| CVE-2026-66280 | — | — | — | Sep 21, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-93884 | — | — | — | Sep 21, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-90839 | — | — | — | Sep 21, 2026 | Rejected reason: this is rejected |
| CVE-2026-89155 | — | — | — | Sep 19, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now