2026 CVE Vulnerabilities

70,690 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-1772MEDIUM5.3RTU500 web interface: An unprivileged user can read user management information. The information cannot be accessed via ...
CVE-2026-2664HIGH7.8An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows,...
CVE-2026-1229CRITICAL9.8The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific input...
CVE-2026-24314MEDIUM4.3Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which...
CVE-2026-3070MEDIUM6.1A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknow...
CVE-2026-3069CRITICAL9.8A security vulnerability has been detected in itsourcecode Document Management System 1.0. Affected is an unknown functi...
CVE-2026-3068CRITICAL9.8A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the f...
CVE-2026-3067HIGH8.8A vulnerability has been found in HummerRisk up to 1.5.0. This issue affects the function extractTarGZ/extractZip of the...
CVE-2026-3066HIGH8.8A flaw has been found in HummerRisk up to 1.5.0. This vulnerability affects the function fixedCommand of the file hummer...
CVE-2026-27461MEDIUM4.9Pimcore is an Open Source Data & Experience Management Platform. In versions up to and including 11.5.14.1 and 12.3.2, t...
CVE-2026-3091HIGH7.3An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read...
CVE-2026-3065HIGH8.8A vulnerability was detected in HummerRisk up to 1.5.0. This affects the function CommandUtils.commonExecCmdWithResult o...
CVE-2026-3064HIGH8.8A security vulnerability has been detected in HummerRisk up to 1.5.0. Affected by this issue is some unknown functionali...
CVE-2026-3057CRITICAL9.8A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProje...
CVE-2026-3054MEDIUM6.1A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the a...
CVE-2026-27129MEDIUM6.5Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, the SSRF...
CVE-2026-27128MEDIUM4.8Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a Time-o...
CVE-2026-27127MEDIUM6.3Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, the SSRF...
CVE-2026-27126MEDIUM4.8Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a stored...
CVE-2026-26983MEDIUM5.3ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...
CVE-2026-26981MEDIUM6.5OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the ...
CVE-2026-26331HIGH8.8yt-dlp is a command-line audio/video downloader. Starting in version 2023.06.21 and prior to version 2026.02.21, when yt...
CVE-2026-26284CRITICAL9.1ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...
CVE-2026-26283HIGH7.5ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...
CVE-2026-26198HIGH7.5Ormar is a async mini ORM for Python. In versions 0.9.9 through 0.22.0, when performing aggregate queries, Ormar ORM con...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now