2026 CVE Vulnerabilities
45,193 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-12788 | MEDIUM | 6.3 | 0.2% | Jun 21, 2026 | A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This vulnerabi... |
| CVE-2026-12787 | MEDIUM | 6.3 | 0.2% | Jun 21, 2026 | A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unk... |
| CVE-2026-12776 | MEDIUM | 6.3 | 0.2% | Jun 21, 2026 | A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects a... |
| CVE-2026-12774 | MEDIUM | 6.3 | 0.3% | Jun 21, 2026 | A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the functi... |
| CVE-2026-12772 | MEDIUM | 6.3 | 0.3% | Jun 21, 2026 | A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the ... |
| CVE-2026-56347 | MEDIUM | 6.1 | 0.2% | Jun 20, 2026 | AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering d... |
| CVE-2026-56346 | MEDIUM | 6.9 | 0.4% | Jun 20, 2026 | AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that... |
| CVE-2026-56342 | MEDIUM | 6.8 | 0.2% | Jun 20, 2026 | AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows aut... |
| CVE-2026-56332 | MEDIUM | 5.1 | 0.2% | Jun 20, 2026 | Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to re... |
| CVE-2026-56330 | MEDIUM | 4.8 | 0.2% | Jun 20, 2026 | Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and stripe_checkout endpoints that accept... |
| CVE-2026-56319 | MEDIUM | 5.3 | 0.2% | Jun 20, 2026 | Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app/:app_id endpoint that ... |
| CVE-2026-56317 | MEDIUM | 6.1 | 0.2% | Jun 20, 2026 | Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting vulnerability in the NoScript compo... |
| CVE-2026-56307 | MEDIUM | 5.3 | 0.2% | Jun 20, 2026 | Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudf... |
| CVE-2026-56304 | MEDIUM | 6.9 | 0.3% | Jun 20, 2026 | picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to cr... |
| CVE-2026-56295 | MEDIUM | 6.3 | 0.2% | Jun 20, 2026 | Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-exp... |
| CVE-2026-56294 | MEDIUM | 4.8 | 0.2% | Jun 20, 2026 | capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSuc... |
| CVE-2026-56282 | MEDIUM | 6.9 | 0.2% | Jun 20, 2026 | Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /replication endpoint that... |
| CVE-2026-56276 | MEDIUM | 6 | 0.3% | Jun 20, 2026 | Flowise before 3.1.2 contains a mass assignment vulnerability in the PUT /api/v1/user endpoint that allows authenticated... |
| CVE-2026-56267 | MEDIUM | 6.9 | 0.3% | Jun 20, 2026 | Flowise before 3.0.13 contains an information exposure vulnerability in the POST /api/v1/account/forgot-password endpoin... |
| CVE-2026-56235 | MEDIUM | 6.9 | 0.3% | Jun 20, 2026 | Cap-go capgo before 12.128.2 contains an authorization bypass in several Supabase PostgREST RPC functions (get_app_metri... |
| CVE-2026-56228 | MEDIUM | 6.9 | 0.3% | Jun 20, 2026 | Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy confi... |
| CVE-2026-56227 | MEDIUM | 5.4 | 0.2% | Jun 20, 2026 | Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopbac... |
| CVE-2026-56218 | MEDIUM | 6.9 | 0.2% | Jun 20, 2026 | Capgo before 12.128.2 fails to strip EXIF metadata including GPS geolocation data from uploaded images, allowing informa... |
| CVE-2026-12673 | MEDIUM | 5.9 | 0.3% | Jun 20, 2026 | Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalati... |
| CVE-2026-12119 | MEDIUM | 6.5 | 0.3% | Jun 20, 2026 | The Simple File List plugin for WordPress is vulnerable to unauthorized file operations due to a missing authorization c... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now