2026 CVE Vulnerabilities

70,707 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-3066HIGH8.8A flaw has been found in HummerRisk up to 1.5.0. This vulnerability affects the function fixedCommand of the file hummer...
CVE-2026-27461MEDIUM4.9Pimcore is an Open Source Data & Experience Management Platform. In versions up to and including 11.5.14.1 and 12.3.2, t...
CVE-2026-3091HIGH7.3An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read...
CVE-2026-3065HIGH8.8A vulnerability was detected in HummerRisk up to 1.5.0. This affects the function CommandUtils.commonExecCmdWithResult o...
CVE-2026-3064HIGH8.8A security vulnerability has been detected in HummerRisk up to 1.5.0. Affected by this issue is some unknown functionali...
CVE-2026-3057CRITICAL9.8A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProje...
CVE-2026-3054MEDIUM6.1A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the a...
CVE-2026-27129MEDIUM6.5Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, the SSRF...
CVE-2026-27128MEDIUM4.8Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a Time-o...
CVE-2026-27127MEDIUM6.3Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, the SSRF...
CVE-2026-27126MEDIUM4.8Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a stored...
CVE-2026-26983MEDIUM5.3ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...
CVE-2026-26981MEDIUM6.5OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the ...
CVE-2026-26331HIGH8.8yt-dlp is a command-line audio/video downloader. Starting in version 2023.06.21 and prior to version 2026.02.21, when yt...
CVE-2026-26284CRITICAL9.1ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...
CVE-2026-26283HIGH7.5ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...
CVE-2026-26198HIGH7.5Ormar is a async mini ORM for Python. In versions 0.9.9 through 0.22.0, when performing aggregate queries, Ormar ORM con...
CVE-2026-26066HIGH7.5ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...
CVE-2026-25989HIGH7.5ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...
CVE-2026-1459HIGH7.2A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG362...
CVE-2026-3053CRITICAL9.8A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file di...
CVE-2026-3052HIGH7.7A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file din...
CVE-2026-25988HIGH7.5ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...
CVE-2026-25987CRITICAL9.1ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...
CVE-2026-25986CRITICAL9.8ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now