2026 CVE Vulnerabilities
70,927 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27195 | HIGH | 7.5 | 0.4% | Feb 24, 2026 | Wasmtime is a runtime for WebAssembly. Starting with Wasmtime 39.0.0, the `component-model-async` feature became the def... |
| CVE-2026-27117 | HIGH | 7.5 | 0.3% | Feb 24, 2026 | bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4... |
| CVE-2026-25899 | HIGH | 7.5 | 0.4% | Feb 24, 2026 | Fiber is an Express inspired web framework written in Go. In versions on the v3 branch prior to 3.1.0, the use of the `f... |
| CVE-2026-25891 | HIGH | 7.5 | 0.6% | Feb 24, 2026 | Fiber is an Express inspired web framework written in Go. A Path Traversal (CWE-22) vulnerability in Fiber allows a remo... |
| CVE-2026-25882 | HIGH | 7.5 | 0.6% | Feb 24, 2026 | Fiber is an Express inspired web framework written in Go. A denial of service vulnerability exists in Fiber v2 and v3 th... |
| CVE-2026-24443 | HIGH | 8.8 | 0.5% | Feb 24, 2026 | EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management fun... |
| CVE-2026-22553 | CRITICAL | 9.8 | 1.4% | Feb 24, 2026 | All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web in... |
| CVE-2026-21410 | CRITICAL | 9.8 | 0.5% | Feb 24, 2026 | InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Malicious users that use the vu... |
| CVE-2026-3131 | MEDIUM | 6.5 | 0.3% | Feb 24, 2026 | Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an au... |
| CVE-2026-3105 | HIGH | 8.8 | 0.3% | Feb 24, 2026 | SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities.... |
| CVE-2026-27477 | MEDIUM | 5.9 | 0.3% | Feb 24, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. FASP registration requires manual approval b... |
| CVE-2026-26342 | CRITICAL | 9.8 | 0.7% | Feb 24, 2026 | Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X... |
| CVE-2026-26341 | CRITICAL | 9.8 | 2.7% | Feb 24, 2026 | Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that a... |
| CVE-2026-26340 | HIGH | 7.5 | 0.8% | Feb 24, 2026 | Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requirin... |
| CVE-2026-24241 | HIGH | 7.5 | 0.6% | Feb 24, 2026 | NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit ... |
| CVE-2026-23859 | LOW | 2.7 | 0.3% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnera... |
| CVE-2026-23858 | MEDIUM | 5.4 | 0.2% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Gener... |
| CVE-2026-22766 | HIGH | 7.2 | 0.7% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulner... |
| CVE-2026-22765 | HIGH | 8.8 | 0.4% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged a... |
| CVE-2026-1768 | MEDIUM | 4.3 | 0.2% | Feb 24, 2026 | A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to acc... |
| CVE-2026-27468 | HIGH | 8.2 | 0.2% | Feb 24, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. FASP registration requires manual approval b... |
| CVE-2026-27156 | MEDIUM | 6.1 | 0.2% | Feb 24, 2026 | NiceGUI is a Python-based UI framework. Prior to version 3.8.0, several NiceGUI APIs that execute methods on client-side... |
| CVE-2026-26222 | CRITICAL | 9.8 | 0.7% | Feb 24, 2026 | Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP... |
| CVE-2026-25603 | MEDIUM | 6.6 | 0.3% | Feb 24, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys ... |
| CVE-2026-27590 | CRITICAL | 9.8 | 0.5% | Feb 24, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's FastCGI path splitting... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now