2026 CVE Vulnerabilities

75,384 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-26698MEDIUM4.9code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php.
CVE-2026-26697MEDIUM4.9code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_view.php?te...
CVE-2026-1628MEDIUM4.6Mattermost Desktop App versions <=5.13.3 fail to attach listeners restricting navigation to external sites within the Ma...
CVE-2026-3432CRITICAL9.1On SimStudio version below to 0.5.74, the `/api/auth/oauth/token` endpoint contains a code path that bypasses all author...
CVE-2026-3431CRITICAL9.8On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller ...
CVE-2026-2584CRITICAL9.3A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system. An unauthe...
CVE-2026-20445MEDIUM4.4In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malic...
CVE-2026-20444MEDIUM6.7In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of ...
CVE-2026-20443MEDIUM6.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg...
CVE-2026-20442MEDIUM4.4In display, there is a possible system crash due to use after free. This could lead to local denial of service if a mali...
CVE-2026-20441MEDIUM6.7In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr...
CVE-2026-20440MEDIUM6.7In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr...
CVE-2026-20439MEDIUM4.4In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malic...
CVE-2026-20438MEDIUM6.4In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privileg...
CVE-2026-20437MEDIUM4.4In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a maliciou...
CVE-2026-20436MEDIUM6.7In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local ...
CVE-2026-20435MEDIUM4.6In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local infor...
CVE-2026-20434HIGH7.5In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of...
CVE-2026-20430HIGH8.8In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (prox...
CVE-2026-20429MEDIUM4.4In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d...
CVE-2026-20428MEDIUM6.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o...
CVE-2026-20427MEDIUM6.7In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalati...
CVE-2026-20426MEDIUM6.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o...
CVE-2026-20425MEDIUM6.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o...
CVE-2026-20424MEDIUM4.4In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now