2026 CVE Vulnerabilities

70,517 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-3200HIGH7.3A vulnerability was identified in z-9527 admin 1.0/2.0. The affected element is the function checkName/register/login/ge...
CVE-2026-3172HIGH8.1Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive da...
CVE-2026-2845MEDIUM6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18....
CVE-2026-27015MEDIUM6.5FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `sma...
CVE-2026-26965HIGH8.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path,...
CVE-2026-26955HIGH8.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can tri...
CVE-2026-26271MEDIUM5.3FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_...
CVE-2026-25997CRITICAL9.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` re...
CVE-2026-25959CRITICAL9.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` pas...
CVE-2026-25955CRITICAL9.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface...
CVE-2026-25954HIGH7.5FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_siz...
CVE-2026-25953CRITICAL9.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface...
CVE-2026-25952CRITICAL9.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` deref...
CVE-2026-25942HIGH7.5FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result...
CVE-2026-22721HIGH7.2VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to ac...
CVE-2026-1747MEDIUM4.3GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18....
CVE-2026-1725HIGH7.5GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain ...
CVE-2026-1662HIGH7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 1...
CVE-2026-1388HIGH7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18...
CVE-2026-0752MEDIUM6.1GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 1...
CVE-2026-0542CRITICAL9.2ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This ...
CVE-2026-2636MEDIUM5.5This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special Elements" weakness, which leads ...
CVE-2026-25941HIGH8.1FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on th...
CVE-2026-25736MEDIUM4.8Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific da...
CVE-2026-25735MEDIUM4.8Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific da...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now