2026 CVE Vulnerabilities
75,384 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23865 | MEDIUM | 5.3 | 0.1% | Mar 2, 2026 | An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13... |
| CVE-2026-21385 | HIGH | 7.8 | 1.1% | Mar 2, 2026 | Memory corruption while using alignments for memory allocation. |
| CVE-2026-28412 | HIGH | 7.5 | 0.3% | Mar 2, 2026 | Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server imposes no limi... |
| CVE-2026-28403 | HIGH | 7.6 | 0.1% | Mar 2, 2026 | Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server (`ws://127.0.0.... |
| CVE-2026-26720 | CRITICAL | 9.8 | 0.8% | Mar 2, 2026 | An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts mod... |
| CVE-2026-26701 | CRITICAL | 9.8 | 0.5% | Mar 2, 2026 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_tecnical_user... |
| CVE-2026-26699 | HIGH | 7.2 | 0.6% | Mar 2, 2026 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/admin... |
| CVE-2026-24112 | CRITICAL | 9.8 | 0.5% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value... |
| CVE-2026-24110 | CRITICAL | 9.8 | 0.4% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may send overly long `addDhcpRules` data. When these ... |
| CVE-2026-24101 | CRITICAL | 9.8 | 1.7% | Mar 2, 2026 | An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the condition is met, `s1_1` wi... |
| CVE-2026-0689 | MEDIUM | 4.9 | 0.3% | Mar 2, 2026 | In ExtremeCloud IQ – Site Engine (XIQ‑SE) before 26.2.10, a vulnerability in the NAC administration interface allows an ... |
| CVE-2026-26703 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php... |
| CVE-2026-26702 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php. |
| CVE-2026-26696 | CRITICAL | 9.8 | 0.5% | Mar 2, 2026 | code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php. |
| CVE-2026-26695 | CRITICAL | 9.8 | 0.5% | Mar 2, 2026 | code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php. |
| CVE-2026-26694 | CRITICAL | 9.8 | 0.5% | Mar 2, 2026 | code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal_view.php. |
| CVE-2026-24115 | CRITICAL | 9.8 | 0.7% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the sizes of `gstup` and `gstdwn` before co... |
| CVE-2026-24114 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate `pPortMapIndex` may lead to buffer overflow... |
| CVE-2026-24113 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the valu... |
| CVE-2026-24111 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value... |
| CVE-2026-24109 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the valu... |
| CVE-2026-24108 | CRITICAL | 9.8 | 0.6% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the valu... |
| CVE-2026-24107 | CRITICAL | 9.8 | 2.2% | Mar 2, 2026 | An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the value of `usbPartitionName`, which is d... |
| CVE-2026-23600 | CRITICAL | 9.8 | 1.0% | Mar 2, 2026 | A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS). |
| CVE-2026-0995 | LOW | 3.6 | 0.1% | Mar 2, 2026 | An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now