2026 CVE Vulnerabilities
75,966 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21902 | CRITICAL | 9.8 | 17.7% | Feb 25, 2026 | An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juni... |
| CVE-2026-3193 | LOW | 3.1 | 0.2% | Feb 25, 2026 | A vulnerability was detected in Chia Blockchain 2.1.0. Impacted is an unknown function of the file /send_transaction. Th... |
| CVE-2026-3192 | HIGH | 8.1 | 0.5% | Feb 25, 2026 | A security vulnerability has been detected in Chia Blockchain 2.1.0. This issue affects the function _authenticate of th... |
| CVE-2026-3189 | LOW | 3.1 | 0.2% | Feb 25, 2026 | A weakness has been identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This vulnerability affects unknown code ... |
| CVE-2026-27849 | CRITICAL | 9.8 | 0.3% | Feb 25, 2026 | Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP... |
| CVE-2026-27738 | MEDIUM | 6.9 | 0.3% | Feb 25, 2026 | The Angular SSR is a server-rise rendering tool for Angular applications. An Open Redirect vulnerability exists in the i... |
| CVE-2026-27736 | MEDIUM | 6.1 | 0.1% | Feb 25, 2026 | BigBlueButton is an open-source virtual classroom. In versions on the 3.x branch prior to 3.0.20, the string received wi... |
| CVE-2026-27728 | HIGH | 8.8 | 1.7% | Feb 25, 2026 | OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vu... |
| CVE-2026-27727 | CRITICAL | 9.8 | 0.8% | Feb 25, 2026 | mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI f... |
| CVE-2026-27706 | HIGH | 7.7 | 0.2% | Feb 25, 2026 | Plane is an an open-source project management tool. Prior to version 1.2.2, a Full Read Server-Side Request Forgery (SSR... |
| CVE-2026-27705 | MEDIUM | 6.5 | 0.2% | Feb 25, 2026 | Plane is an an open-source project management tool. Prior to version 1.2.2, the `ProjectAssetEndpoint.patch()` method in... |
| CVE-2026-26717 | MEDIUM | 4.8 | 0.4% | Feb 25, 2026 | An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py. The application used the non-constant time == operat... |
| CVE-2026-20133 | HIGH | 7.5 | 10.2% | Feb 25, 2026 | A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive info... |
| CVE-2026-20129 | CRITICAL | 9.8 | 0.7% | Feb 25, 2026 | A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote a... |
| CVE-2026-20128 | HIGH | 7.5 | 5.3% | Feb 25, 2026 | A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticat... |
| CVE-2026-20127 | CRITICAL | 10 | 57.8% | Feb 25, 2026 | A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalys... |
| CVE-2026-20126 | HIGH | 7.8 | 0.3% | Feb 25, 2026 | A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gai... |
| CVE-2026-20122 | MEDIUM | 5.4 | 7.0% | Feb 25, 2026 | A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite a... |
| CVE-2026-20107 | MEDIUM | 5.5 | 0.1% | Feb 25, 2026 | A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC) could all... |
| CVE-2026-20099 | MEDIUM | 6.7 | 0.6% | Feb 25, 2026 | A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could a... |
| CVE-2026-20091 | MEDIUM | 4.8 | 0.2% | Feb 25, 2026 | A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow ... |
| CVE-2026-20051 | HIGH | 7.4 | 0.2% | Feb 25, 2026 | A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and... |
| CVE-2026-20048 | HIGH | 7.7 | 0.3% | Feb 25, 2026 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches in... |
| CVE-2026-20037 | MEDIUM | 4.4 | 0.1% | Feb 25, 2026 | A vulnerability in the NX-OS CLI privilege levels of Cisco UCS Manager Software could allow an authenticated, local atta... |
| CVE-2026-20036 | MEDIUM | 6.5 | 0.4% | Feb 25, 2026 | A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now