2026 CVE Vulnerabilities
70,908 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-3134 | CRITICAL | 9.8 | 0.3% | Feb 25, 2026 | A security flaw has been discovered in itsourcecode News Portal Project 1.0. The affected element is an unknown function... |
| CVE-2026-3133 | CRITICAL | 9.8 | 0.4% | Feb 25, 2026 | A vulnerability has been found in itsourcecode Document Management System 1.0. This issue affects some unknown processin... |
| CVE-2026-26351 | MEDIUM | 4.8 | 0.3% | Feb 24, 2026 | GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS... |
| CVE-2026-27593 | HIGH | 8.8 | 0.5% | Feb 24, 2026 | Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 6.3.3 and 5.73.10, an attacker... |
| CVE-2026-27572 | HIGH | 7.5 | 0.5% | Feb 24, 2026 | Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implemen... |
| CVE-2026-27204 | MEDIUM | 6.5 | 0.3% | Feb 24, 2026 | Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implemen... |
| CVE-2026-27195 | HIGH | 7.5 | 0.4% | Feb 24, 2026 | Wasmtime is a runtime for WebAssembly. Starting with Wasmtime 39.0.0, the `component-model-async` feature became the def... |
| CVE-2026-27117 | HIGH | 7.5 | 0.3% | Feb 24, 2026 | bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4... |
| CVE-2026-25899 | HIGH | 7.5 | 0.4% | Feb 24, 2026 | Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the `f... |
| CVE-2026-25891 | HIGH | 7.5 | 0.6% | Feb 24, 2026 | Fiber is an Express inspired web framework written in Go. A Path Traversal (CWE-22) vulnerability in Fiber allows a remo... |
| CVE-2026-25882 | HIGH | 7.5 | 0.6% | Feb 24, 2026 | Fiber is an Express inspired web framework written in Go. A denial of service vulnerability exists in Fiber v2 and v3 th... |
| CVE-2026-24443 | HIGH | 8.8 | 0.5% | Feb 24, 2026 | EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management fun... |
| CVE-2026-22553 | CRITICAL | 9.8 | 1.4% | Feb 24, 2026 | All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web in... |
| CVE-2026-21410 | CRITICAL | 9.8 | 0.5% | Feb 24, 2026 | InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Malicious users that use the vu... |
| CVE-2026-3131 | MEDIUM | 6.5 | 0.3% | Feb 24, 2026 | Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an au... |
| CVE-2026-3105 | HIGH | 8.8 | 0.3% | Feb 24, 2026 | SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities.... |
| CVE-2026-27477 | MEDIUM | 5.9 | 0.3% | Feb 24, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. FASP registration requires manual approval b... |
| CVE-2026-26342 | CRITICAL | 9.8 | 0.7% | Feb 24, 2026 | Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X... |
| CVE-2026-26341 | CRITICAL | 9.8 | 2.7% | Feb 24, 2026 | Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that a... |
| CVE-2026-26340 | HIGH | 7.5 | 0.8% | Feb 24, 2026 | Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requirin... |
| CVE-2026-24241 | HIGH | 7.5 | 0.6% | Feb 24, 2026 | NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit ... |
| CVE-2026-23859 | LOW | 2.7 | 0.3% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnera... |
| CVE-2026-23858 | MEDIUM | 5.4 | 0.2% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Gener... |
| CVE-2026-22766 | HIGH | 7.2 | 0.7% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulner... |
| CVE-2026-22765 | HIGH | 8.8 | 0.4% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged a... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now