2026 CVE Vulnerabilities
70,559 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27728 | HIGH | 8.8 | 1.7% | Feb 25, 2026 | OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vu... |
| CVE-2026-27727 | CRITICAL | 9.8 | 0.8% | Feb 25, 2026 | mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI f... |
| CVE-2026-27706 | HIGH | 7.7 | 0.2% | Feb 25, 2026 | Plane is an an open-source project management tool. Prior to version 1.2.2, a Full Read Server-Side Request Forgery (SSR... |
| CVE-2026-27705 | MEDIUM | 6.5 | 0.2% | Feb 25, 2026 | Plane is an an open-source project management tool. Prior to version 1.2.2, the `ProjectAssetEndpoint.patch()` method in... |
| CVE-2026-26717 | MEDIUM | 4.8 | 0.4% | Feb 25, 2026 | An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py. The application used the non-constant time == operat... |
| CVE-2026-20133 | HIGH | 7.5 | 10.2% | Feb 25, 2026 | A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive info... |
| CVE-2026-20129 | CRITICAL | 9.8 | 0.7% | Feb 25, 2026 | A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote a... |
| CVE-2026-20128 | HIGH | 7.5 | 5.3% | Feb 25, 2026 | A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticat... |
| CVE-2026-20127 | CRITICAL | 10 | 57.8% | Feb 25, 2026 | A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalys... |
| CVE-2026-20126 | HIGH | 7.8 | 0.3% | Feb 25, 2026 | A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gai... |
| CVE-2026-20122 | MEDIUM | 5.4 | 7.0% | Feb 25, 2026 | A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite a... |
| CVE-2026-20107 | MEDIUM | 5.5 | 0.1% | Feb 25, 2026 | A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC) could all... |
| CVE-2026-20099 | MEDIUM | 6.7 | 0.6% | Feb 25, 2026 | A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could a... |
| CVE-2026-20091 | MEDIUM | 4.8 | 0.2% | Feb 25, 2026 | A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow ... |
| CVE-2026-20051 | HIGH | 7.4 | 0.2% | Feb 25, 2026 | A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and... |
| CVE-2026-20048 | HIGH | 7.7 | 0.3% | Feb 25, 2026 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches in... |
| CVE-2026-20037 | MEDIUM | 4.4 | 0.1% | Feb 25, 2026 | A vulnerability in the NX-OS CLI privilege levels of Cisco UCS Manager Software could allow an authenticated, local atta... |
| CVE-2026-20036 | MEDIUM | 6.5 | 0.4% | Feb 25, 2026 | A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated... |
| CVE-2026-20033 | HIGH | 7.4 | 0.2% | Feb 25, 2026 | A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker... |
| CVE-2026-20010 | HIGH | 7.4 | 0.2% | Feb 25, 2026 | A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticat... |
| CVE-2026-3206 | LOW | 1.3 | 0.3% | Feb 25, 2026 | Improper Resource Shutdown or Release vulnerability in KrakenD, SLU KrakenD-CE (CircuitBreaker modules), KrakenD, SLU Kr... |
| CVE-2026-3188 | MEDIUM | 4.3 | 0.3% | Feb 25, 2026 | A security flaw has been discovered in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This affects an unknown part of the... |
| CVE-2026-27848 | CRITICAL | 9.8 | 0.3% | Feb 25, 2026 | Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection... |
| CVE-2026-27847 | CRITICAL | 9.8 | 0.3% | Feb 25, 2026 | Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connec... |
| CVE-2026-27846 | MEDIUM | 6.2 | 0.1% | Feb 25, 2026 | Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now