2026 CVE Vulnerabilities
75,932 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-3275 | HIGH | 8.8 | 0.8% | Feb 27, 2026 | A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromAddressNat of the file /goform/addre... |
| CVE-2026-3274 | HIGH | 8.8 | 0.9% | Feb 27, 2026 | A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function frmL7ProtForm of the f... |
| CVE-2026-3037 | HIGH | 8.8 | 1.9% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker t... |
| CVE-2026-25721 | HIGH | 8.8 | 1.9% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ... |
| CVE-2026-25196 | HIGH | 8.8 | 1.9% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ... |
| CVE-2026-25105 | HIGH | 8.8 | 1.9% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated atta... |
| CVE-2026-25037 | HIGH | 8.8 | 1.9% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker... |
| CVE-2026-24498 | HIGH | 7.5 | 0.4% | Feb 27, 2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Network... |
| CVE-2026-24497 | CRITICAL | 9.8 | 0.3% | Feb 27, 2026 | Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue aff... |
| CVE-2026-24452 | HIGH | 8.8 | 1.9% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker... |
| CVE-2026-23702 | HIGH | 8.8 | 1.9% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ... |
| CVE-2026-22877 | CRITICAL | 9.1 | 0.6% | Feb 27, 2026 | An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to... |
| CVE-2026-20797 | CRITICAL | 9.8 | 0.8% | Feb 27, 2026 | A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated att... |
| CVE-2026-20764 | HIGH | 8.8 | 1.9% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ... |
| CVE-2026-3273 | HIGH | 8.8 | 0.6% | Feb 27, 2026 | A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of t... |
| CVE-2026-27647 | CRITICAL | 9.8 | 0.3% | Feb 27, 2026 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to... |
| CVE-2026-27028 | CRITICAL | 9.8 | 0.5% | Feb 27, 2026 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersona... |
| CVE-2026-26305 | CRITICAL | 9.8 | 0.5% | Feb 27, 2026 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absen... |
| CVE-2026-26290 | CRITICAL | 9.8 | 0.3% | Feb 27, 2026 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to... |
| CVE-2026-25774 | MEDIUM | 5.3 | 0.3% | Feb 27, 2026 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-25195 | MEDIUM | 6.6 | 1.4% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attack... |
| CVE-2026-25111 | HIGH | 8.8 | 1.5% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ... |
| CVE-2026-25109 | HIGH | 8.8 | 1.5% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacke... |
| CVE-2026-25085 | CRITICAL | 9.8 | 0.5% | Feb 27, 2026 | A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the auth... |
| CVE-2026-24695 | HIGH | 8.8 | 1.5% | Feb 27, 2026 | An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attac... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now