2026 CVE Vulnerabilities
73,467 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-28429 | HIGH | 7.5 | 0.7% | Mar 6, 2026 | Talishar is a fan-made Flesh and Blood project. Prior to commit 6be3871, a Path Traversal vulnerability was identified i... |
| CVE-2026-28428 | MEDIUM | 5.3 | 0.3% | Mar 6, 2026 | Talishar is a fan-made Flesh and Blood project. Prior to commit a9c218e, an authentication bypass vulnerability in Talis... |
| CVE-2026-27605 | MEDIUM | 5.4 | 0.2% | Mar 6, 2026 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c... |
| CVE-2026-27603 | HIGH | 7.5 | 0.4% | Mar 6, 2026 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c... |
| CVE-2026-27005 | CRITICAL | 9.8 | 0.5% | Mar 6, 2026 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c... |
| CVE-2026-25888 | HIGH | 8.8 | 0.7% | Mar 6, 2026 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c... |
| CVE-2026-25887 | HIGH | 7.2 | 0.8% | Mar 6, 2026 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c... |
| CVE-2026-25877 | MEDIUM | 6.5 | 0.3% | Mar 6, 2026 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create c... |
| CVE-2026-29093 | CRITICAL | 9.8 | 0.5% | Mar 6, 2026 | WWBN AVideo is an open source video platform. Prior to version 24.0, the official docker-compose.yml publishes the memca... |
| CVE-2026-29046 | HIGH | 8.2 | 0.4% | Mar 6, 2026 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.04, TinyWeb accepts request header... |
| CVE-2026-29041 | HIGH | 8.8 | 0.7% | Mar 6, 2026 | Chamilo is a learning management system. Prior to version 1.11.34, Chamilo LMS is affected by an authenticated remote co... |
| CVE-2026-28502 | HIGH | 8.8 | 0.7% | Mar 6, 2026 | WWBN AVideo is an open source video platform. Prior to version 24.0, an authenticated Remote Code Execution (RCE) vulner... |
| CVE-2026-28501 | CRITICAL | 9.8 | 1.5% | Mar 6, 2026 | WWBN AVideo is an open source video platform. Prior to version 24.0, an unauthenticated SQL Injection vulnerability exis... |
| CVE-2026-28497 | CRITICAL | 9.1 | 0.5% | Mar 6, 2026 | TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.03, an integer overflow vulnerabil... |
| CVE-2026-27807 | MEDIUM | 4.9 | 0.3% | Mar 6, 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs allows... |
| CVE-2026-25962 | MEDIUM | 6.5 | 0.3% | Mar 6, 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs curren... |
| CVE-2026-3616 | MEDIUM | 6.3 | 0.2% | Mar 6, 2026 | A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0. Impacted is an unkno... |
| CVE-2026-3613 | HIGH | 7.3 | 0.7% | Mar 6, 2026 | A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the ... |
| CVE-2026-3612 | HIGH | 7.3 | 9.5% | Mar 6, 2026 | A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub_405AF4 of the file /cgi-bin/... |
| CVE-2026-3610 | MEDIUM | 4.3 | 0.3% | Mar 6, 2026 | A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3. Affected by this issue is some unknown funct... |
| CVE-2026-2589 | MEDIUM | 5.3 | 0.2% | Mar 6, 2026 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure ... |
| CVE-2026-28727 | HIGH | 7.8 | 0.1% | Mar 6, 2026 | Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber P... |
| CVE-2026-28726 | MEDIUM | 4.3 | 0.2% | Mar 6, 2026 | Sensitive information disclosure due to improper access control. The following products are affected: Acronis Cyber Prot... |
| CVE-2026-28725 | MEDIUM | 5.5 | 0.1% | Mar 6, 2026 | Sensitive information disclosure due to improper configuration of a headless browser. The following products are affecte... |
| CVE-2026-28724 | MEDIUM | 4.3 | 0.2% | Mar 6, 2026 | Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyb... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now