2026 CVE Vulnerabilities
45,571 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-14622 | HIGH | 7.3 | 0.5% | Jul 4, 2026 | A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. Th... |
| CVE-2026-12252 | HIGH | 7.8 | 0.1% | Jul 4, 2026 | In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, Stanford... |
| CVE-2026-54424 | HIGH | 8.4 | 0.2% | Jul 4, 2026 | An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Pri... |
| CVE-2026-58424 | HIGH | 8.9 | 0.2% | Jul 3, 2026 | Permanent Fork PR Workflow Approval Gate Bypass |
| CVE-2026-58423 | HIGH | 7.7 | 0.3% | Jul 3, 2026 | LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories |
| CVE-2026-58421 | HIGH | 7.5 | 0.2% | Jul 3, 2026 | Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service |
| CVE-2026-58419 | HIGH | 7.5 | 0.2% | Jul 3, 2026 | Notification API leaks private issue metadata after access revocation |
| CVE-2026-58299 | HIGH | 7.5 | 0.3% | Jul 3, 2026 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execu... |
| CVE-2026-58297 | HIGH | 7.1 | 0.3% | Jul 3, 2026 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized a... |
| CVE-2026-58296 | HIGH | 7.1 | 0.3% | Jul 3, 2026 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized a... |
| CVE-2026-58295 | HIGH | 8.3 | 0.4% | Jul 3, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized ... |
| CVE-2026-58294 | HIGH | 7.5 | 0.3% | Jul 3, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58293 | HIGH | 7.5 | 0.5% | Jul 3, 2026 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code... |
| CVE-2026-58292 | HIGH | 7.5 | 0.3% | Jul 3, 2026 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw... |
| CVE-2026-58290 | HIGH | 7.5 | 0.2% | Jul 3, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized ... |
| CVE-2026-58289 | HIGH | 8.3 | 0.5% | Jul 3, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized ... |
| CVE-2026-58288 | HIGH | 8.3 | 0.4% | Jul 3, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58287 | HIGH | 8.3 | 0.4% | Jul 3, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58285 | HIGH | 8.3 | 0.4% | Jul 3, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized ... |
| CVE-2026-58284 | HIGH | 8.3 | 0.4% | Jul 3, 2026 | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network... |
| CVE-2026-58276 | HIGH | 7.5 | 0.4% | Jul 3, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57993 | HIGH | 7.4 | 0.6% | Jul 3, 2026 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofin... |
| CVE-2026-57992 | HIGH | 7.5 | 0.4% | Jul 3, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57991 | HIGH | 7.4 | 0.8% | Jul 3, 2026 | Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized... |
| CVE-2026-57988 | HIGH | 7.1 | 0.5% | Jul 3, 2026 | Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a networ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now