2026 CVE Vulnerabilities
75,477 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24908 | MEDIUM | 6.5 | 0.5% | Feb 25, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio... |
| CVE-2026-24890 | MEDIUM | 6.5 | 0.2% | Feb 25, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio... |
| CVE-2026-24487 | MEDIUM | 6.5 | 0.3% | Feb 25, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio... |
| CVE-2026-24005 | HIGH | 7.6 | 0.3% | Feb 25, 2026 | Kruise provides automated management of large-scale applications on Kubernetes. Prior to versions 1.8.3 and 1.7.5, PodPr... |
| CVE-2026-23627 | HIGH | 8.8 | 0.8% | Feb 25, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio... |
| CVE-2026-3194 | HIGH | 7 | 0.2% | Feb 25, 2026 | A flaw has been found in Chia Blockchain 2.1.0. The affected element is the function send_transaction/get_private_key of... |
| CVE-2026-27850 | HIGH | 7.5 | 0.2% | Feb 25, 2026 | Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source por... |
| CVE-2026-27795 | HIGH | 7.4 | 0.2% | Feb 25, 2026 | LangChain is a framework for building LLM-powered applications. Prior to version 1.1.8, a redirect-based Server-Side Req... |
| CVE-2026-27794 | MEDIUM | 6.6 | 0.7% | Feb 25, 2026 | LangGraph Checkpoint defines the base interface for LangGraph checkpointers. Prior to version 4.0.0, a Remote Code Execu... |
| CVE-2026-27739 | CRITICAL | 9.2 | 0.5% | Feb 25, 2026 | The Angular SSR is a server-rise rendering tool for Angular applications. Versions prior to 21.2.0-rc.1, 21.1.5, 20.3.17... |
| CVE-2026-25554 | HIGH | 8.3 | 0.3% | Feb 25, 2026 | OpenSIPS versions 3.1 before 3.6.4 containing the auth_jwt module (prior to commit 3822d33) contain a SQL injection vuln... |
| CVE-2026-21902 | CRITICAL | 9.8 | 17.7% | Feb 25, 2026 | An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juni... |
| CVE-2026-3193 | LOW | 3.1 | 0.2% | Feb 25, 2026 | A vulnerability was detected in Chia Blockchain 2.1.0. Impacted is an unknown function of the file /send_transaction. Th... |
| CVE-2026-3192 | HIGH | 8.1 | 0.5% | Feb 25, 2026 | A security vulnerability has been detected in Chia Blockchain 2.1.0. This issue affects the function _authenticate of th... |
| CVE-2026-3189 | LOW | 3.1 | 0.2% | Feb 25, 2026 | A weakness has been identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This vulnerability affects unknown code ... |
| CVE-2026-27849 | CRITICAL | 9.8 | 0.3% | Feb 25, 2026 | Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP... |
| CVE-2026-27738 | MEDIUM | 6.9 | 0.3% | Feb 25, 2026 | The Angular SSR is a server-rise rendering tool for Angular applications. An Open Redirect vulnerability exists in the i... |
| CVE-2026-27736 | MEDIUM | 6.1 | 0.1% | Feb 25, 2026 | BigBlueButton is an open-source virtual classroom. In versions on the 3.x branch prior to 3.0.20, the string received wi... |
| CVE-2026-27728 | HIGH | 8.8 | 1.7% | Feb 25, 2026 | OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vu... |
| CVE-2026-27727 | CRITICAL | 9.8 | 0.8% | Feb 25, 2026 | mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI f... |
| CVE-2026-27706 | HIGH | 7.7 | 0.2% | Feb 25, 2026 | Plane is an an open-source project management tool. Prior to version 1.2.2, a Full Read Server-Side Request Forgery (SSR... |
| CVE-2026-27705 | MEDIUM | 6.5 | 0.2% | Feb 25, 2026 | Plane is an an open-source project management tool. Prior to version 1.2.2, the `ProjectAssetEndpoint.patch()` method in... |
| CVE-2026-26717 | MEDIUM | 4.8 | 0.4% | Feb 25, 2026 | An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py. The application used the non-constant time == operat... |
| CVE-2026-20133 | HIGH | 7.5 | 10.2% | Feb 25, 2026 | A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive info... |
| CVE-2026-20129 | CRITICAL | 9.8 | 0.7% | Feb 25, 2026 | A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote a... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now