2026 CVE Vulnerabilities
75,970 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-20051 | HIGH | 7.4 | 0.2% | Feb 25, 2026 | A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and... |
| CVE-2026-20048 | HIGH | 7.7 | 0.3% | Feb 25, 2026 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches in... |
| CVE-2026-20037 | MEDIUM | 4.4 | 0.1% | Feb 25, 2026 | A vulnerability in the NX-OS CLI privilege levels of Cisco UCS Manager Software could allow an authenticated, local atta... |
| CVE-2026-20036 | MEDIUM | 6.5 | 0.4% | Feb 25, 2026 | A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated... |
| CVE-2026-20033 | HIGH | 7.4 | 0.2% | Feb 25, 2026 | A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker... |
| CVE-2026-20010 | HIGH | 7.4 | 0.2% | Feb 25, 2026 | A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticat... |
| CVE-2026-3206 | LOW | 1.3 | 0.3% | Feb 25, 2026 | Improper Resource Shutdown or Release vulnerability in KrakenD, SLU KrakenD-CE (CircuitBreaker modules), KrakenD, SLU Kr... |
| CVE-2026-3188 | MEDIUM | 4.3 | 0.3% | Feb 25, 2026 | A security flaw has been discovered in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This affects an unknown part of the... |
| CVE-2026-27848 | CRITICAL | 9.8 | 0.3% | Feb 25, 2026 | Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection... |
| CVE-2026-27847 | CRITICAL | 9.8 | 0.3% | Feb 25, 2026 | Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connec... |
| CVE-2026-27846 | MEDIUM | 6.2 | 0.1% | Feb 25, 2026 | Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a ... |
| CVE-2026-27730 | HIGH | 7.5 | 0.3% | Feb 25, 2026 | esm.sh is a no-build content delivery network (CDN) for web development. Versions up to and including 137 have an SSRF v... |
| CVE-2026-27704 | HIGH | 7.5 | 0.4% | Feb 25, 2026 | The Dart and Flutter SDKs provide software development kits for the Dart programming language. In versions of the Dart S... |
| CVE-2026-27702 | CRITICAL | 9 | 0.3% | Feb 25, 2026 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. Prior to version 3.30.4, an un... |
| CVE-2026-27701 | HIGH | 8.8 | 0.3% | Feb 25, 2026 | LiveCode is an open-source, client-side code playground. Prior to commit e151c64c2bd80d2d53ac1333f1df9429fe6a1a11, LiveC... |
| CVE-2026-27700 | HIGH | 7.5 | 0.2% | Feb 25, 2026 | Hono is a Web application framework that provides support for any JavaScript runtime. In versions 4.12.0 and 4.12.1, whe... |
| CVE-2026-22866 | HIGH | 7.5 | 0.2% | Feb 25, 2026 | Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain. In ve... |
| CVE-2026-3203 | HIGH | 7.5 | 0.2% | Feb 25, 2026 | RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service |
| CVE-2026-3202 | HIGH | 7.5 | 0.2% | Feb 25, 2026 | NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service |
| CVE-2026-3201 | HIGH | 7.5 | 0.2% | Feb 25, 2026 | USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service |
| CVE-2026-3197 | — | — | — | Feb 25, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-3187 | CRITICAL | 9.8 | 0.3% | Feb 25, 2026 | A vulnerability was identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this issue is some unknown f... |
| CVE-2026-2878 | MEDIUM | 5.9 | 0.2% | Feb 25, 2026 | In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerability exists in RadAsyn... |
| CVE-2026-27699 | CRITICAL | 9.8 | 0.5% | Feb 25, 2026 | The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in versions prior to 5.2... |
| CVE-2026-27695 | MEDIUM | 5.3 | 0.2% | Feb 25, 2026 | zae-limiter is a rate limiting library using the token bucket algorithm. Prior to version 0.10.1, all rate limit buckets... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now