2026 CVE Vulnerabilities

71,031 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-27483HIGH8.8MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a p...
CVE-2026-27208HIGH7.8bleon-ethical/api-gateway-deploy provides API gateway deployment. Version 1.0.0 is vulnerable to an attack chain involvi...
CVE-2026-0402MEDIUM4.9A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.
CVE-2026-0401MEDIUM4.9A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.
CVE-2026-0400MEDIUM4.9A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
CVE-2026-0399MEDIUM4.9Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to impr...
CVE-2026-2807CRITICAL9.8Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption a...
CVE-2026-2806CRITICAL9.1Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2805CRITICAL9.8Invalid pointer in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2804MEDIUM5.4Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148...
CVE-2026-2803HIGH7.5Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and ...
CVE-2026-2802MEDIUM4.2Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2801HIGH7.5Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and ...
CVE-2026-2800CRITICAL9.8Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 148 and Thunder...
CVE-2026-2799CRITICAL9.8Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2798HIGH8.8Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2797CRITICAL9.8Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2796CRITICAL9.8JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird...
CVE-2026-2795CRITICAL9.8Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
CVE-2026-2794HIGH7.5Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixe...
CVE-2026-2793CRITICAL9.8Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird ...
CVE-2026-2792CRITICAL9.8Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these b...
CVE-2026-2791CRITICAL9.8Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Th...
CVE-2026-2790CRITICAL9.8Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140...
CVE-2026-2789CRITICAL9.8Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Fir...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now