2026 CVE Vulnerabilities
75,954 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27493 | CRITICAL | 9 | 1.1% | Feb 25, 2026 | n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expres... |
| CVE-2026-2694 | MEDIUM | 5.4 | 0.2% | Feb 25, 2026 | The The Events Calendar plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to ... |
| CVE-2026-27951 | HIGH | 7.5 | 0.3% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function `Stream_EnsureCap... |
| CVE-2026-27950 | HIGH | 7.5 | 0.4% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the fix for the heap-use-after... |
| CVE-2026-27819 | HIGH | 7.2 | 0.7% | Feb 25, 2026 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the restoreConfig function in vi... |
| CVE-2026-27616 | HIGH | 7.3 | 0.5% | Feb 25, 2026 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to ... |
| CVE-2026-27575 | CRITICAL | 9.1 | 0.4% | Feb 25, 2026 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the application allows users to ... |
| CVE-2026-27148 | CRITICAL | 9.6 | 0.5% | Feb 25, 2026 | Storybook is a frontend workshop for building user interface components and pages in isolation. Prior to versions 7.6.23... |
| CVE-2026-27116 | MEDIUM | 6.1 | 0.2% | Feb 25, 2026 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, a reflected HTML injection vulne... |
| CVE-2026-26986 | HIGH | 7.5 | 0.5% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereference... |
| CVE-2026-26985 | MEDIUM | 6.5 | 0.3% | Feb 25, 2026 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project... |
| CVE-2026-26984 | HIGH | 8.8 | 0.7% | Feb 25, 2026 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project... |
| CVE-2026-3200 | HIGH | 7.3 | 0.3% | Feb 25, 2026 | A vulnerability was identified in z-9527 admin 1.0/2.0. The affected element is the function checkName/register/login/ge... |
| CVE-2026-3172 | HIGH | 8.1 | 0.3% | Feb 25, 2026 | Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive da... |
| CVE-2026-2845 | MEDIUM | 6.5 | 0.3% | Feb 25, 2026 | An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.... |
| CVE-2026-27015 | MEDIUM | 6.5 | 0.3% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `sma... |
| CVE-2026-26965 | HIGH | 8.8 | 0.6% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path,... |
| CVE-2026-26955 | HIGH | 8.8 | 0.5% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can tri... |
| CVE-2026-26271 | MEDIUM | 5.3 | 0.2% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_... |
| CVE-2026-25997 | CRITICAL | 9.8 | 0.6% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` re... |
| CVE-2026-25959 | CRITICAL | 9.8 | 0.6% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` pas... |
| CVE-2026-25955 | CRITICAL | 9.8 | 0.5% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface... |
| CVE-2026-25954 | HIGH | 7.5 | 0.5% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_siz... |
| CVE-2026-25953 | CRITICAL | 9.8 | 0.6% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface... |
| CVE-2026-25952 | CRITICAL | 9.8 | 0.6% | Feb 25, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` deref... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now