2026 CVE Vulnerabilities
70,613 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23678 | HIGH | 8.8 | 1.2% | Feb 24, 2026 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerabilit... |
| CVE-2026-3102 | HIGH | 8.8 | 3.4% | Feb 24, 2026 | A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the fil... |
| CVE-2026-3101 | HIGH | 8.8 | 3.5% | Feb 24, 2026 | A vulnerability was found in Intelbras TIP 635G 1.12.3.5. This vulnerability affects unknown code of the component Ping ... |
| CVE-2026-27732 | HIGH | 8.1 | 0.2% | Feb 24, 2026 | WWBN AVideo is an open source video platform. Prior to version 22.0, the `aVideoEncoder.json.php` API endpoint accepts a... |
| CVE-2026-27584 | HIGH | 7.5 | 0.4% | Feb 24, 2026 | Actual is a local-first personal finance tool. Prior to version 26.2.1, missing authentication middleware in the ActualB... |
| CVE-2026-27568 | MEDIUM | 6.1 | 0.2% | Feb 24, 2026 | WWBN AVideo is an open source video platform. Prior to version 21.0, AVideo allows Markdown in video comments and uses P... |
| CVE-2026-27567 | MEDIUM | 4.8 | 0.3% | Feb 24, 2026 | Payload is a free and open source headless content management system. Prior to 3.75.0, a Server-Side Request Forgery (SS... |
| CVE-2026-27483 | HIGH | 8.8 | 11.1% | Feb 24, 2026 | MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a p... |
| CVE-2026-27208 | HIGH | 7.8 | 0.7% | Feb 24, 2026 | bleon-ethical/api-gateway-deploy provides API gateway deployment. Version 1.0.0 is vulnerable to an attack chain involvi... |
| CVE-2026-0402 | MEDIUM | 4.9 | 0.3% | Feb 24, 2026 | A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall. |
| CVE-2026-0401 | MEDIUM | 4.9 | 0.3% | Feb 24, 2026 | A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall. |
| CVE-2026-0400 | MEDIUM | 4.9 | 0.4% | Feb 24, 2026 | A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall. |
| CVE-2026-0399 | MEDIUM | 4.9 | 0.3% | Feb 24, 2026 | Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to impr... |
| CVE-2026-2807 | CRITICAL | 9.8 | 0.2% | Feb 24, 2026 | Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption a... |
| CVE-2026-2806 | CRITICAL | 9.1 | 0.4% | Feb 24, 2026 | Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2805 | CRITICAL | 9.8 | 0.4% | Feb 24, 2026 | Invalid pointer in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2804 | MEDIUM | 5.4 | 0.3% | Feb 24, 2026 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148... |
| CVE-2026-2803 | HIGH | 7.5 | 0.3% | Feb 24, 2026 | Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and ... |
| CVE-2026-2802 | MEDIUM | 4.2 | 0.1% | Feb 24, 2026 | Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2801 | HIGH | 7.5 | 0.3% | Feb 24, 2026 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and ... |
| CVE-2026-2800 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 148 and Thunder... |
| CVE-2026-2799 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2798 | HIGH | 8.8 | 0.2% | Feb 24, 2026 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2797 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2796 | CRITICAL | 9.8 | 0.6% | Feb 24, 2026 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now