2026 CVE Vulnerabilities
75,390 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-28415 | MEDIUM | 4.7 | 0.2% | Feb 27, 2026 | Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target(... |
| CVE-2026-28414 | HIGH | 7.5 | 3.1% | Feb 27, 2026 | Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.7, Gradio apps running on Win... |
| CVE-2026-28411 | CRITICAL | 9.8 | 0.6% | Feb 27, 2026 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the `extract()` function on... |
| CVE-2026-28409 | HIGH | 7.2 | 3.3% | Feb 27, 2026 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, a critical Remote Code Execution (RCE) vulne... |
| CVE-2026-28408 | CRITICAL | 9.8 | 0.5% | Feb 27, 2026 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, the script in adicionar_tipo_docs_atendido.p... |
| CVE-2026-28407 | MEDIUM | 5.3 | 0.2% | Feb 27, 2026 | malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior ... |
| CVE-2026-28406 | HIGH | 8.2 | 0.6% | Feb 27, 2026 | kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in vers... |
| CVE-2026-28402 | HIGH | 7.1 | 0.2% | Feb 27, 2026 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus a... |
| CVE-2026-28400 | HIGH | 7.5 | 0.2% | Feb 27, 2026 | Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker. Versions prior to 1.0.16 e... |
| CVE-2026-27939 | HIGH | 8.8 | 0.4% | Feb 27, 2026 | Statmatic is a Laravel and Git powered content management system (CMS). Starting in version 6.0.0 and prior to version 6... |
| CVE-2026-27167 | MEDIUM | 5.9 | 0.5% | Feb 27, 2026 | Gradio is an open-source Python package designed for quick prototyping. Starting in version 4.16.0 and prior to version ... |
| CVE-2026-28355 | LOW | 1.3 | 0.4% | Feb 27, 2026 | Canarytokens help track activity and actions on a network. Versions prior to `sha-7ff0e12` have a Self Cross-Site Script... |
| CVE-2026-28352 | MEDIUM | 6.5 | 0.3% | Feb 27, 2026 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In vers... |
| CVE-2026-28351 | MEDIUM | 5.3 | 0.4% | Feb 27, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attacker who uses this vulnerability... |
| CVE-2026-28338 | MEDIUM | 6.1 | 0.3% | Feb 27, 2026 | PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's `vbhtml` and `yahtml` report for... |
| CVE-2026-28288 | MEDIUM | 5.3 | 0.6% | Feb 27, 2026 | Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-exi... |
| CVE-2026-28272 | MEDIUM | 4.8 | 0.3% | Feb 27, 2026 | Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway... |
| CVE-2026-28271 | MEDIUM | 6.5 | 0.4% | Feb 27, 2026 | Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration functional... |
| CVE-2026-28270 | HIGH | 7.2 | 1.6% | Feb 27, 2026 | Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows upl... |
| CVE-2026-28268 | CRITICAL | 9.8 | 0.7% | Feb 27, 2026 | Vikunja is an open-source self-hosted task management platform. Versions prior to 2.1.0 have a business logic vulnerabil... |
| CVE-2026-3255 | MEDIUM | 6.5 | 0.4% | Feb 27, 2026 | HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function. The HTTP... |
| CVE-2026-28354 | MEDIUM | 6.5 | 0.3% | Feb 27, 2026 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, collection item operations are vulne... |
| CVE-2026-28231 | CRITICAL | 9.1 | 0.6% | Feb 27, 2026 | pillow_heif is a Python library for working with HEIF images and plugin for Pillow. Prior to version 1.3.0, an integer o... |
| CVE-2026-27947 | HIGH | 8.8 | 0.7% | Feb 27, 2026 | Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, an... |
| CVE-2026-27836 | HIGH | 7.5 | 0.4% | Feb 27, 2026 | phpMyFAQ is an open source FAQ web application. Prior to version 4.0.18, the WebAuthn prepare endpoint (`/api/webauthn/p... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now