2026 CVE Vulnerabilities

70,525 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-1662HIGH7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 1...
CVE-2026-1388HIGH7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18...
CVE-2026-0752MEDIUM6.1GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 1...
CVE-2026-0542CRITICAL9.2ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This ...
CVE-2026-2636MEDIUM5.5This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special Elements" weakness, which leads ...
CVE-2026-25941HIGH8.1FreeRDP is a free implementation of the Remote Desktop Protocol. Versions on the 2.x branch prior to to 2.11.8 and on th...
CVE-2026-25736MEDIUM4.8Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific da...
CVE-2026-25735MEDIUM4.8Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific da...
CVE-2026-25734MEDIUM4.8Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific da...
CVE-2026-25733MEDIUM5.4Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific da...
CVE-2026-25138MEDIUM5.3Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific da...
CVE-2026-25136MEDIUM6.1Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific da...
CVE-2026-22720CRITICAL9VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create...
CVE-2026-22719HIGH8.1VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this is...
CVE-2026-3221MEDIUM4.9Sensitive user account information is not encrypted in the database in Devolutions Server 2025.3.14 and earlier, which ...
CVE-2026-25930MEDIUM6.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio...
CVE-2026-25929MEDIUM6.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio...
CVE-2026-25927HIGH7.1OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio...
CVE-2026-25746HIGH8.8OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior ...
CVE-2026-25743MEDIUM4.8OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio...
CVE-2026-25476HIGH7.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio...
CVE-2026-25220MEDIUM6.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio...
CVE-2026-25164HIGH8.1OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio...
CVE-2026-24908MEDIUM6.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio...
CVE-2026-24890MEDIUM6.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now