2026 CVE Vulnerabilities
70,630 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2762 | CRITICAL | 9.8 | 0.5% | Feb 24, 2026 | Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR... |
| CVE-2026-2761 | CRITICAL | 10 | 0.4% | Feb 24, 2026 | Sandbox escape in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Fi... |
| CVE-2026-2760 | CRITICAL | 10 | 0.4% | Feb 24, 2026 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed i... |
| CVE-2026-2759 | CRITICAL | 9.8 | 0.4% | Feb 24, 2026 | Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ... |
| CVE-2026-2758 | CRITICAL | 9.8 | 0.5% | Feb 24, 2026 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox... |
| CVE-2026-2757 | CRITICAL | 9.8 | 0.5% | Feb 24, 2026 | Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox... |
| CVE-2026-2634 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Malicious scripts could cause desynchronization between the address bar and web content before a response is received in... |
| CVE-2026-2460 | HIGH | 8.1 | 0.3% | Feb 24, 2026 | A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of ... |
| CVE-2026-2459 | HIGH | 8.1 | 0.3% | Feb 24, 2026 | A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of direc... |
| CVE-2026-23984 | MEDIUM | 6.5 | 0.3% | Feb 24, 2026 | An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab acces... |
| CVE-2026-23983 | MEDIUM | 6.5 | 0.4% | Feb 24, 2026 | A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive use... |
| CVE-2026-23982 | MEDIUM | 6.5 | 0.4% | Feb 24, 2026 | An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data acces... |
| CVE-2026-23980 | MEDIUM | 6.5 | 0.5% | Feb 24, 2026 | Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset all... |
| CVE-2026-23969 | MEDIUM | 6.5 | 0.6% | Feb 24, 2026 | Apache Superset utilizes a configurable dictionary, DISALLOWED_SQL_FUNCTIONS, to restrict the execution of potentially s... |
| CVE-2026-1773 | HIGH | 7.5 | 0.4% | Feb 24, 2026 | IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is on... |
| CVE-2026-1772 | MEDIUM | 5.3 | 0.3% | Feb 24, 2026 | RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via ... |
| CVE-2026-2664 | HIGH | 7.8 | 0.2% | Feb 24, 2026 | An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows,... |
| CVE-2026-1229 | CRITICAL | 9.8 | 0.4% | Feb 24, 2026 | The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific input... |
| CVE-2026-24314 | MEDIUM | 4.3 | 0.2% | Feb 24, 2026 | Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which... |
| CVE-2026-3070 | MEDIUM | 6.1 | 0.3% | Feb 24, 2026 | A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknow... |
| CVE-2026-3069 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | A security vulnerability has been detected in itsourcecode Document Management System 1.0. Affected is an unknown functi... |
| CVE-2026-3068 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the f... |
| CVE-2026-3067 | HIGH | 8.8 | 0.5% | Feb 24, 2026 | A vulnerability has been found in HummerRisk up to 1.5.0. This issue affects the function extractTarGZ/extractZip of the... |
| CVE-2026-3066 | HIGH | 8.8 | 9.1% | Feb 24, 2026 | A flaw has been found in HummerRisk up to 1.5.0. This vulnerability affects the function fixedCommand of the file hummer... |
| CVE-2026-27461 | MEDIUM | 4.9 | 0.5% | Feb 24, 2026 | Pimcore is an Open Source Data & Experience Management Platform. In versions up to and including 11.5.14.1 and 12.3.2, t... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now