2026 CVE Vulnerabilities
73,699 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25921 | CRITICAL | 9.3 | 0.3% | Mar 5, 2026 | Gogs is an open source self-hosted Git service. Prior to version 0.14.2, overwritable LFS object across different repos ... |
| CVE-2026-24457 | CRITICAL | 9.8 | 0.6% | Mar 5, 2026 | An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbit... |
| CVE-2026-30798 | HIGH | 7.5 | 0.3% | Mar 5, 2026 | Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-cl... |
| CVE-2026-30797 | HIGH | 8.1 | 0.5% | Mar 5, 2026 | Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, An... |
| CVE-2026-30796 | HIGH | 7.5 | 0.3% | Mar 5, 2026 | Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client R... |
| CVE-2026-30795 | HIGH | 7.5 | 0.3% | Mar 5, 2026 | Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Wind... |
| CVE-2026-30794 | — | — | — | Mar 5, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-30793 | CRITICAL | 9.8 | 0.3% | Mar 5, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Li... |
| CVE-2026-30792 | HIGH | 8.1 | 0.3% | Mar 5, 2026 | A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (St... |
| CVE-2026-30790 | — | — | — | Mar 5, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-30789 | CRITICAL | 9.8 | 0.3% | Mar 5, 2026 | Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts v... |
| CVE-2026-30785 | MEDIUM | 5.5 | 0.1% | Mar 5, 2026 | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Ins... |
| CVE-2026-30784 | — | — | — | Mar 5, 2026 | Rejected reason: This CVE ID has been withdrawn by its CVE Numbering Authority. |
| CVE-2026-30783 | CRITICAL | 9.8 | 0.4% | Mar 5, 2026 | A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Cl... |
| CVE-2026-26377 | MEDIUM | 5.4 | 0.4% | Mar 5, 2026 | Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the N... |
| CVE-2026-25048 | HIGH | 7.5 | 0.7% | Mar 5, 2026 | xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32,... |
| CVE-2026-3598 | HIGH | 7.5 | 0.2% | Mar 5, 2026 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-serve... |
| CVE-2026-30791 | HIGH | 7.5 | 0.2% | Mar 5, 2026 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Win... |
| CVE-2026-27750 | HIGH | 7 | 0.1% | Mar 5, 2026 | Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privil... |
| CVE-2026-27749 | HIGH | 7.8 | 0.3% | Mar 5, 2026 | Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The ... |
| CVE-2026-27748 | HIGH | 7.1 | 0.2% | Mar 5, 2026 | Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the... |
| CVE-2026-1720 | HIGH | 8.8 | 0.3% | Mar 5, 2026 | The WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation plugin for WordPress is vulne... |
| CVE-2026-2599 | CRITICAL | 9.8 | 0.5% | Mar 5, 2026 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in ... |
| CVE-2026-3236 | MEDIUM | 4.3 | 0.2% | Mar 5, 2026 | In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting i... |
| CVE-2026-21628 | CRITICAL | 9.8 | 0.5% | Mar 5, 2026 | A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading t... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now