2026 CVE Vulnerabilities
71,334 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27742 | MEDIUM | 5.4 | 0.1% | Feb 23, 2026 | Bludit version 3.16.2 contains a stored cross-site scripting (XSS) vulnerability in the post content functionality. The ... |
| CVE-2026-27741 | MEDIUM | 4.3 | 0.1% | Feb 23, 2026 | Bludit version 3.16.1 contains a cross-site request forgery (CSRF) vulnerability in the /admin/uninstall-plugin/ and /ad... |
| CVE-2026-27163 | — | — | — | Feb 23, 2026 | Rejected reason: This CVE was assigned in error. |
| CVE-2026-25984 | — | — | — | Feb 23, 2026 | Rejected reason: This CVE was assigned in error. |
| CVE-2026-25649 | HIGH | 8.7 | 0.1% | Feb 23, 2026 | Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticat... |
| CVE-2026-3075 | MEDIUM | 5.3 | 0.3% | Feb 23, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat ... |
| CVE-2026-3027 | MEDIUM | 6.1 | 0.3% | Feb 23, 2026 | A vulnerability was found in erzhongxmu JEEWMS up to 3.7. This affects an unknown part of the file src/main/webapp/plug-... |
| CVE-2026-3026 | HIGH | 7.3 | 0.4% | Feb 23, 2026 | A vulnerability has been found in erzhongxmu JEEWMS 3.7. Affected by this issue is some unknown functionality of the fil... |
| CVE-2026-3025 | CRITICAL | 9.8 | 0.4% | Feb 23, 2026 | A flaw has been found in ShuoRen Smart Heating Integrated Management Platform 1.0.0. Affected by this vulnerability is a... |
| CVE-2026-25648 | HIGH | 8.7 | 0.3% | Feb 23, 2026 | Versions of the Traccar open-source GPS tracking system starting with 6.11.1 contain an issue in which authenticated use... |
| CVE-2026-23694 | MEDIUM | 5.1 | 0.2% | Feb 23, 2026 | Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery ... |
| CVE-2026-23693 | CRITICAL | 10 | 0.4% | Feb 23, 2026 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin ver... |
| CVE-2026-23521 | MEDIUM | 6.5 | 0.3% | Feb 23, 2026 | Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticat... |
| CVE-2026-27623 | HIGH | 7.5 | 0.4% | Feb 23, 2026 | Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with... |
| CVE-2026-21863 | HIGH | 7.5 | 0.6% | Feb 23, 2026 | Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with ac... |
| CVE-2026-26464 | MEDIUM | 6.1 | 0.2% | Feb 23, 2026 | Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, w... |
| CVE-2026-2698 | MEDIUM | 6.5 | 0.2% | Feb 23, 2026 | An improper access control vulnerability exists where an authenticated user could access areas outside of their authoriz... |
| CVE-2026-27514 | HIGH | 7.1 | 0.2% | Feb 23, 2026 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive information exposure vulnerability in... |
| CVE-2026-27513 | MEDIUM | 5.1 | 0.1% | Feb 23, 2026 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability... |
| CVE-2026-27512 | MEDIUM | 6.1 | 0.2% | Feb 23, 2026 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability in the adm... |
| CVE-2026-27511 | MEDIUM | 5.1 | 0.2% | Feb 23, 2026 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based adm... |
| CVE-2026-22568 | LOW | 2.7 | 0.2% | Feb 23, 2026 | Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated ... |
| CVE-2026-22567 | LOW | 2.7 | 0.2% | Feb 23, 2026 | Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate ba... |
| CVE-2026-3016 | HIGH | 8.8 | 0.7% | Feb 23, 2026 | A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the ... |
| CVE-2026-3015 | HIGH | 8.8 | 0.8% | Feb 23, 2026 | A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114. Impacted is the function strcpy of the file /goform... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now