2026 CVE Vulnerabilities

69,569 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-30981MEDIUM6.1iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is ...
CVE-2026-30980MEDIUM5.5iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is ...
CVE-2026-30979HIGH7.8iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is ...
CVE-2026-30978HIGH7.8iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is ...
CVE-2026-30977LOW2RenderBlocking is a MediaWiki extension that allows interface administrators to specify render-blocking CSS and JavaScri...
CVE-2026-30974MEDIUM5.4Copyparty is a portable file server. Prior to v1.20.11., the nohtml config option, intended to prevent execution of Java...
CVE-2026-30973MEDIUM6.5Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Pri...
CVE-2026-30970CRITICAL9.1Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The I...
CVE-2026-30969CRITICAL9.1Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The I...
CVE-2026-30968CRITICAL9.8Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The I...
CVE-2026-30964MEDIUM5.4web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that ...
CVE-2026-30960CRITICAL9.4rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical...
CVE-2026-30959MEDIUM5OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any au...
CVE-2026-30958HIGH8.6OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, an unauthenticated path traversal...
CVE-2026-30957CRITICAL9.9OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, OneUptime Synthetic Monitors allo...
CVE-2026-30956CRITICAL9.9OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, a low‑privileged user can bypass ...
CVE-2026-30945HIGH7.1StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the DELETE /studi...
CVE-2026-30944HIGH8.8StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the /studiocms_ap...
CVE-2026-30942MEDIUM6.5Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to 1.7.3, an ...
CVE-2026-30941HIGH7.5Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.14 ...
CVE-2026-30939HIGH7.5Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.13 ...
CVE-2026-30938MEDIUM5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.12 ...
CVE-2026-30934MEDIUM5.4FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, Stored XSS is ...
CVE-2026-30933HIGH7.5FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, the remediatio...
CVE-2026-30930CRITICAL9.8Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.1, The TimescaleDB export module construct...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now