2026 CVE Vulnerabilities
70,517 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27709 | MEDIUM | 6.6 | 0.1% | Feb 26, 2026 | NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to versions 6.0.1638.0 and 6.5.1638.0, ... |
| CVE-2026-27635 | HIGH | 8.8 | 0.4% | Feb 26, 2026 | Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on ... |
| CVE-2026-27633 | HIGH | 7.5 | 0.4% | Feb 26, 2026 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 have a Denial of Servi... |
| CVE-2026-27630 | HIGH | 7.5 | 0.4% | Feb 26, 2026 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Versions prior to version 2.02 are vulnerable to a De... |
| CVE-2026-26186 | HIGH | 8.8 | 0.3% | Feb 26, 2026 | Fleet is open source device management software. A SQL injection vulnerability in versions prior to 4.80.1 allowed authe... |
| CVE-2026-3209 | MEDIUM | 6.3 | 0.3% | Feb 25, 2026 | A vulnerability has been found in fosrl Pangolin up to 1.15.4-s.3. This affects the function verifyRoleAccess/verifyApiK... |
| CVE-2026-27613 | CRITICAL | 9.8 | 0.7% | Feb 25, 2026 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. A vulnerability in versions prior to 2.01 allows unau... |
| CVE-2026-27578 | MEDIUM | 5.4 | 0.2% | Feb 25, 2026 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user... |
| CVE-2026-27577 | CRITICAL | 9.9 | 8.6% | Feb 25, 2026 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, additional exploits i... |
| CVE-2026-27498 | HIGH | 8.8 | 0.7% | Feb 25, 2026 | n8n is an open source workflow automation platform. Prior to versions 2.2.0 and 1.123.8, an authenticated user with perm... |
| CVE-2026-27497 | HIGH | 8.8 | 0.8% | Feb 25, 2026 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user... |
| CVE-2026-27495 | CRITICAL | 9.9 | 0.6% | Feb 25, 2026 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user... |
| CVE-2026-27494 | CRITICAL | 9.9 | 0.4% | Feb 25, 2026 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user... |
| CVE-2026-27493 | CRITICAL | 9 | 1.1% | Feb 25, 2026 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expres... |
| CVE-2026-2694 | MEDIUM | 5.4 | 0.2% | Feb 25, 2026 | The The Events Calendar plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to ... |
| CVE-2026-27951 | HIGH | 7.5 | 0.3% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCap... |
| CVE-2026-27950 | HIGH | 7.5 | 0.4% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after... |
| CVE-2026-27819 | HIGH | 7.2 | 0.7% | Feb 25, 2026 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the restoreConfig function in vi... |
| CVE-2026-27616 | HIGH | 7.3 | 0.5% | Feb 25, 2026 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to ... |
| CVE-2026-27575 | CRITICAL | 9.1 | 0.4% | Feb 25, 2026 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to ... |
| CVE-2026-27148 | CRITICAL | 9.6 | 0.5% | Feb 25, 2026 | Storybook is a frontend workshop for building user interface components and pages in isolation. Prior to versions 7.6.23... |
| CVE-2026-27116 | MEDIUM | 6.1 | 0.2% | Feb 25, 2026 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, a reflected HTML injection vulne... |
| CVE-2026-26986 | HIGH | 7.5 | 0.5% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereference... |
| CVE-2026-26985 | MEDIUM | 6.5 | 0.3% | Feb 25, 2026 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project... |
| CVE-2026-26984 | HIGH | 8.8 | 0.7% | Feb 25, 2026 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now