2026 CVE Vulnerabilities
45,453 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-48613 | MEDIUM | 5.9 | 0.2% | Jun 12, 2026 | SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field dat... |
| CVE-2026-20746 | MEDIUM | 6.3 | 0.3% | Jun 12, 2026 | Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust j... |
| CVE-2026-9125 | MEDIUM | 6.4 | 0.2% | Jun 12, 2026 | The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_url' parameter of the ... |
| CVE-2026-49482 | MEDIUM | 4.3 | 0.2% | Jun 12, 2026 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #141, ClipBucket v5 contains an imprope... |
| CVE-2026-47238 | MEDIUM | 6.5 | 0.2% | Jun 11, 2026 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can e... |
| CVE-2026-45173 | MEDIUM | 6.5 | 0.2% | Jun 11, 2026 | Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validatio... |
| CVE-2026-12033 | MEDIUM | 5.3 | 0.2% | Jun 11, 2026 | Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromise... |
| CVE-2026-12026 | MEDIUM | 6.5 | 0.2% | Jun 11, 2026 | Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compr... |
| CVE-2026-12025 | MEDIUM | 5.3 | 0.2% | Jun 11, 2026 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker... |
| CVE-2026-12024 | MEDIUM | 6.5 | 0.2% | Jun 11, 2026 | Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker to bypass... |
| CVE-2026-12015 | MEDIUM | 5.3 | 0.2% | Jun 11, 2026 | Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the re... |
| CVE-2026-53818 | MEDIUM | 6.9 | 0.1% | Jun 11, 2026 | OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-own... |
| CVE-2026-53809 | MEDIUM | 4.8 | 0.1% | Jun 11, 2026 | OpenClaw before 2026.4.25 contains a policy bypass vulnerability in embedded runner policy that allows requests using pr... |
| CVE-2026-53808 | MEDIUM | 6.5 | 0.2% | Jun 11, 2026 | OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop apply flow that allows a... |
| CVE-2026-53781 | MEDIUM | 5.3 | 0.3% | Jun 11, 2026 | Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhausti... |
| CVE-2026-49949 | MEDIUM | 6 | 0.3% | Jun 11, 2026 | CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercep... |
| CVE-2026-45802 | MEDIUM | 6 | 0.3% | Jun 11, 2026 | FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as template... |
| CVE-2026-53702 | MEDIUM | 6.5 | 0.2% | Jun 11, 2026 | A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buf... |
| CVE-2026-53701 | MEDIUM | 6.5 | 0.2% | Jun 11, 2026 | An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad.... |
| CVE-2026-47250 | MEDIUM | 6.1 | 0.3% | Jun 11, 2026 | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Prior to version 3.7.0, the ... |
| CVE-2026-47177 | MEDIUM | 5.7 | 0.3% | Jun 11, 2026 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a use... |
| CVE-2026-47176 | MEDIUM | 5.7 | 0.3% | Jun 11, 2026 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a use... |
| CVE-2026-47173 | MEDIUM | 6.3 | 0.3% | Jun 11, 2026 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a nor... |
| CVE-2026-47167 | MEDIUM | 5.3 | 0.1% | Jun 11, 2026 | Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:s... |
| CVE-2026-47157 | MEDIUM | 6.5 | 0.2% | Jun 11, 2026 | aiograpi is an asynchronous Instagram API for Python. aiograpi versions before 0.9.10 accepted server-supplied signup ch... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now