2026 CVE Vulnerabilities
74,355 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-28789 | HIGH | 7.5 | 0.4% | Mar 5, 2026 | OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.3, an unauthenticated ... |
| CVE-2026-28353 | CRITICAL | 10 | 0.5% | Mar 5, 2026 | Trivy Vulnerability Scanner is a VS Code extension that helps find vulnerabilities. In Trivy VSCode Extension version 1.... |
| CVE-2026-28350 | MEDIUM | 6.1 | 0.3% | Mar 5, 2026 | lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, th... |
| CVE-2026-28348 | MEDIUM | 6.1 | 0.2% | Mar 5, 2026 | lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.4, th... |
| CVE-2026-28343 | MEDIUM | 6.1 | 0.3% | Mar 5, 2026 | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. Starting in version 29.0.0 and prior to ver... |
| CVE-2026-28342 | HIGH | 7.5 | 0.6% | Mar 5, 2026 | OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.2, the PasswordHash AP... |
| CVE-2026-28277 | HIGH | 7.2 | 5.2% | Mar 5, 2026 | LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, ... |
| CVE-2026-28223 | MEDIUM | 6.1 | 0.5% | Mar 5, 2026 | Wagtail is an open source content management system built on Django. Prior to versions 6.3.8, 7.0.6, 7.2.3, and 7.3.1, a... |
| CVE-2026-28222 | MEDIUM | 6.1 | 0.4% | Mar 5, 2026 | Wagtail is an open source content management system built on Django. Prior to versions 6.3.8, 7.0.6, 7.2.3, and 7.3.1, a... |
| CVE-2026-21621 | MEDIUM | 5.3 | 0.3% | Mar 5, 2026 | Incorrect Authorization vulnerability in hexpm hexpm/hexpm ('Elixir.HexpmWeb.API.OAuthController' module) allows Privile... |
| CVE-2026-3459 | HIGH | 8.1 | 0.6% | Mar 5, 2026 | The Drag and Drop Multiple File Upload - Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due... |
| CVE-2026-3047 | HIGH | 8.8 | 0.5% | Mar 5, 2026 | A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language (SAML) client is config... |
| CVE-2026-3009 | HIGH | 8.1 | 0.3% | Mar 5, 2026 | A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an... |
| CVE-2026-29054 | HIGH | 7.5 | 0.5% | Mar 5, 2026 | Traefik is an HTTP reverse proxy and load balancer. From version 2.11.9 to 2.11.37 and from version 3.1.3 to 3.6.8, ther... |
| CVE-2026-28287 | HIGH | 8.8 | 8.5% | Mar 5, 2026 | FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, ... |
| CVE-2026-28284 | HIGH | 8.8 | 0.2% | Mar 5, 2026 | FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, the FreePBX logfiles module contains several aut... |
| CVE-2026-28210 | HIGH | 8.8 | 0.3% | Mar 5, 2026 | FreePBX is an open source IP PBX. Prior to versions 16.0.49 and 17.0.7, FreePBX module cdr (Call Data Record) is vulnera... |
| CVE-2026-28209 | HIGH | 7.2 | 0.9% | Mar 5, 2026 | FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, ... |
| CVE-2026-27944 | CRITICAL | 9.8 | 22.2% | Mar 5, 2026 | Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.3, the /api/backup endpoint is accessibl... |
| CVE-2026-27723 | MEDIUM | 5.3 | 0.2% | Mar 5, 2026 | OpenProject is an open-source, web-based project management software. Prior to versions 17.0.5 and 17.1.2, an attacker c... |
| CVE-2026-27023 | MEDIUM | 5 | 0.2% | Mar 5, 2026 | Twenty is an open source CRM. Prior to version 1.18, the SSRF protection in SecureHttpClientService validated request UR... |
| CVE-2026-26999 | HIGH | 7.5 | 0.5% | Mar 5, 2026 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerabil... |
| CVE-2026-26998 | MEDIUM | 4.4 | 0.5% | Mar 5, 2026 | Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerabil... |
| CVE-2026-26418 | HIGH | 7.5 | 0.4% | Mar 5, 2026 | Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows rem... |
| CVE-2026-26417 | HIGH | 8.1 | 0.3% | Mar 5, 2026 | A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Clie... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now