2026 CVE Vulnerabilities
74,293 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-28724 | MEDIUM | 4.3 | 0.2% | Mar 6, 2026 | Unauthorized data access due to insufficient access control validation. The following products are affected: Acronis Cyb... |
| CVE-2026-28723 | MEDIUM | 4.3 | 0.2% | Mar 6, 2026 | Unauthorized report deletion due to insufficient access control. The following products are affected: Acronis Cyber Prot... |
| CVE-2026-28722 | HIGH | 7.3 | 0.2% | Mar 6, 2026 | Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec... |
| CVE-2026-28721 | HIGH | 7.3 | 0.2% | Mar 6, 2026 | Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec... |
| CVE-2026-28720 | MEDIUM | 4.3 | 0.2% | Mar 6, 2026 | Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acr... |
| CVE-2026-28719 | MEDIUM | 4.3 | 0.2% | Mar 6, 2026 | Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cy... |
| CVE-2026-28718 | HIGH | 7.5 | 0.3% | Mar 6, 2026 | Denial of service due to insufficient input validation in authentication logging. The following products are affected: A... |
| CVE-2026-28717 | MEDIUM | 5 | 0.1% | Mar 6, 2026 | Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Pro... |
| CVE-2026-28716 | MEDIUM | 4.4 | 0.1% | Mar 6, 2026 | Information disclosure and manipulation due to improper authorization checks. The following products are affected: Acron... |
| CVE-2026-28715 | MEDIUM | 6.5 | 0.3% | Mar 6, 2026 | Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cybe... |
| CVE-2026-28714 | MEDIUM | 4.8 | 0.2% | Mar 6, 2026 | Unnecessary transmission of sensitive cryptographic material. The following products are affected: Acronis Cyber Protect... |
| CVE-2026-28713 | HIGH | 7.1 | 0.2% | Mar 6, 2026 | Default credentials set for local privileged user in Virtual Appliance. The following products are affected: Acronis Cyb... |
| CVE-2026-28712 | MEDIUM | 6.3 | 0.1% | Mar 6, 2026 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec... |
| CVE-2026-28711 | MEDIUM | 6.3 | 0.1% | Mar 6, 2026 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec... |
| CVE-2026-28710 | CRITICAL | 9.8 | 0.4% | Mar 6, 2026 | Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: A... |
| CVE-2026-28709 | MEDIUM | 4.3 | 0.2% | Mar 6, 2026 | Unauthorized resource manipulation due to improper authorization checks. The following products are affected: Acronis Cy... |
| CVE-2026-27778 | HIGH | 8.7 | 0.6% | Mar 6, 2026 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absenc... |
| CVE-2026-27770 | MEDIUM | 6.9 | 0.3% | Mar 6, 2026 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-24912 | HIGH | 8.6 | 0.4% | Mar 6, 2026 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to ... |
| CVE-2026-22552 | CRITICAL | 9.8 | 0.9% | Mar 6, 2026 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonat... |
| CVE-2026-26125 | CRITICAL | 9.8 | 1.2% | Mar 5, 2026 | Payment Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2026-26124 | MEDIUM | 6.7 | 0.5% | Mar 5, 2026 | '.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally. |
| CVE-2026-26122 | MEDIUM | 6.5 | 1.0% | Mar 5, 2026 | Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose... |
| CVE-2026-23651 | MEDIUM | 6.7 | 0.6% | Mar 5, 2026 | Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21536 | CRITICAL | 9.8 | 1.6% | Mar 5, 2026 | Microsoft Devices Pricing Program Remote Code Execution Vulnerability |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now