2026 CVE Vulnerabilities
75,330 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-20044 | MEDIUM | 6 | 0.1% | Mar 4, 2026 | A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authe... |
| CVE-2026-20039 | HIGH | 8.6 | 0.4% | Mar 4, 2026 | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secu... |
| CVE-2026-20031 | MEDIUM | 5.3 | 0.4% | Mar 4, 2026 | A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacke... |
| CVE-2026-20018 | MEDIUM | 5.9 | 0.4% | Mar 4, 2026 | A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure... |
| CVE-2026-20017 | MEDIUM | 6 | 0.2% | Mar 4, 2026 | A vulnerability in the CLI of Cisco Secure FTD Software could allow an authenticated, local attacker to execute arbitrar... |
| CVE-2026-20015 | MEDIUM | 5.8 | 0.3% | Mar 4, 2026 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an ... |
| CVE-2026-20014 | HIGH | 7.7 | 0.3% | Mar 4, 2026 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an ... |
| CVE-2026-20013 | MEDIUM | 5.8 | 0.3% | Mar 4, 2026 | A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an ... |
| CVE-2026-20009 | MEDIUM | 5.3 | 0.4% | Mar 4, 2026 | A vulnerability in the implementation of the proprietary SSH stack with SSH key-based authentication in Cisco Secure Fir... |
| CVE-2026-20008 | MEDIUM | 6 | 0.1% | Mar 4, 2026 | A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (AS... |
| CVE-2026-20007 | MEDIUM | 5.8 | 0.2% | Mar 4, 2026 | A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense (FTD) Software... |
| CVE-2026-20006 | MEDIUM | 5.8 | 0.4% | Mar 4, 2026 | A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat De... |
| CVE-2026-20003 | MEDIUM | 4.9 | 0.3% | Mar 4, 2026 | A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQ... |
| CVE-2026-20002 | HIGH | 8.1 | 0.3% | Mar 4, 2026 | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote ... |
| CVE-2026-20001 | MEDIUM | 6.5 | 0.3% | Mar 4, 2026 | A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQ... |
| CVE-2026-3520 | HIGH | 7.5 | 0.7% | Mar 4, 2026 | Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.1 allo... |
| CVE-2026-29069 | MEDIUM | 5.3 | 0.3% | Mar 4, 2026 | Craft is a content management system (CMS). Prior to 5.9.0-beta.2 and 4.17.0-beta.2, the actionSendActivationEmail() end... |
| CVE-2026-28784 | HIGH | 7.2 | 0.5% | Mar 4, 2026 | Craft is a content management system (CMS). Prior to 5.8.22 and 4.16.18, it is possible to craft a malicious payload usi... |
| CVE-2026-28783 | CRITICAL | 9.1 | 0.5% | Mar 4, 2026 | Craft is a content management system (CMS). Prior to 5.9.0-beta.1 and 4.17.0-beta.1, Craft CMS implements a blocklist to... |
| CVE-2026-28782 | MEDIUM | 4.3 | 0.2% | Mar 4, 2026 | Craft is a content management system (CMS). Prior to 5.9.0-beta.1 and 4.17.0-beta.1, the "Duplicate" entry action does n... |
| CVE-2026-28781 | MEDIUM | 6.5 | 0.3% | Mar 4, 2026 | Craft is a content management system (CMS). Prior to 4.17.0-beta.1 and 5.9.0-beta.1, the entry creation process allows f... |
| CVE-2026-28697 | CRITICAL | 9.1 | 1.1% | Mar 4, 2026 | Craft is a content management system (CMS). Prior to 4.17.0-beta.1 and 5.9.0-beta.1, an authenticated administrator can ... |
| CVE-2026-28696 | HIGH | 7.5 | 0.4% | Mar 4, 2026 | Craft is a content management system (CMS). Prior to 4.17.0-beta.1 and 5.9.0-beta.1, the GraphQL directive @parseRefs, i... |
| CVE-2026-28695 | HIGH | 7.2 | 0.6% | Mar 4, 2026 | Craft is a content management system (CMS). There is an authenticated admin RCE in Craft CMS 5.8.21 via Server-Side Temp... |
| CVE-2026-23812 | MEDIUM | 4.2 | 0.1% | Mar 4, 2026 | A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless clie... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now