2026 CVE Vulnerabilities
75,940 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26682 | HIGH | 7.8 | 0.2% | Feb 26, 2026 | An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the PluginController.java compo... |
| CVE-2026-26227 | LOW | 3.7 | 0.5% | Feb 26, 2026 | VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature du... |
| CVE-2026-23750 | HIGH | 8.1 | 0.2% | Feb 26, 2026 | Golioth Pouch version 0.1.0, prior to commit 1b2219a1, contains a heap-based buffer overflow in BLE GATT server certific... |
| CVE-2026-23749 | LOW | 2.9 | 0.2% | Feb 26, 2026 | Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to impr... |
| CVE-2026-23748 | MEDIUM | 6.3 | 0.3% | Feb 26, 2026 | Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bounds read in LightDB ... |
| CVE-2026-23747 | MEDIUM | 6.3 | 0.3% | Feb 26, 2026 | Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in P... |
| CVE-2026-28296 | MEDIUM | 4.3 | 0.4% | Feb 26, 2026 | A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplyi... |
| CVE-2026-28295 | MEDIUM | 4.3 | 0.2% | Feb 26, 2026 | A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrar... |
| CVE-2026-26265 | HIGH | 7.5 | 0.2% | Feb 26, 2026 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, an IDOR vulnerabil... |
| CVE-2026-26228 | MEDIUM | 4.9 | 0.4% | Feb 26, 2026 | VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server rout... |
| CVE-2026-26207 | MEDIUM | 5.4 | 0.2% | Feb 26, 2026 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, `discourse-policy`... |
| CVE-2026-26078 | HIGH | 7.5 | 0.2% | Feb 26, 2026 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, when the `patreon_... |
| CVE-2026-3071 | HIGH | 8.4 | 0.2% | Feb 26, 2026 | Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest are vulnerable to ar... |
| CVE-2026-2244 | HIGH | 8.4 | 0.2% | Feb 26, 2026 | A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid ... |
| CVE-2026-26077 | MEDIUM | 6.5 | 0.2% | Feb 26, 2026 | Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, several webhook en... |
| CVE-2026-2680 | MEDIUM | 6.1 | 0.2% | Feb 26, 2026 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.... |
| CVE-2026-2679 | MEDIUM | 6.1 | 0.2% | Feb 26, 2026 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolte... |
| CVE-2026-2678 | MEDIUM | 6.1 | 0.2% | Feb 26, 2026 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura... |
| CVE-2026-2677 | MEDIUM | 6.1 | 0.2% | Feb 26, 2026 | Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3factura-app.wolterskluwer... |
| CVE-2026-1198 | HIGH | 8.6 | 0.3% | Feb 26, 2026 | SIMPLE.ERP is vulnerable to the SQL Injection in search functionality in "Obroty na kontach" window. Lack of input valid... |
| CVE-2026-28138 | HIGH | 7.2 | 0.4% | Feb 26, 2026 | Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects... |
| CVE-2026-28136 | HIGH | 7.6 | 0.3% | Feb 26, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs WP SMS ... |
| CVE-2026-28132 | MEDIUM | 5.3 | 0.2% | Feb 26, 2026 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in villatheme WooCommerce Ph... |
| CVE-2026-28131 | MEDIUM | 6.5 | 0.2% | Feb 26, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-e... |
| CVE-2026-28083 | MEDIUM | 6.5 | 0.1% | Feb 26, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now