2026 CVE Vulnerabilities
76,214 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26340 | HIGH | 7.5 | 0.8% | Feb 24, 2026 | Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requirin... |
| CVE-2026-24241 | HIGH | 7.5 | 0.6% | Feb 24, 2026 | NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit ... |
| CVE-2026-23859 | LOW | 2.7 | 0.3% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnera... |
| CVE-2026-23858 | MEDIUM | 5.4 | 0.2% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Gener... |
| CVE-2026-22766 | HIGH | 7.2 | 0.7% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulner... |
| CVE-2026-22765 | HIGH | 8.8 | 0.4% | Feb 24, 2026 | Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged a... |
| CVE-2026-1768 | MEDIUM | 4.3 | 0.2% | Feb 24, 2026 | A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to acc... |
| CVE-2026-27468 | HIGH | 8.2 | 0.2% | Feb 24, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. FASP registration requires manual approval b... |
| CVE-2026-27156 | MEDIUM | 6.1 | 0.2% | Feb 24, 2026 | NiceGUI is a Python-based UI framework. Prior to version 3.8.0, several NiceGUI APIs that execute methods on client-side... |
| CVE-2026-26222 | CRITICAL | 9.8 | 0.7% | Feb 24, 2026 | Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP... |
| CVE-2026-25603 | MEDIUM | 6.6 | 0.3% | Feb 24, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys ... |
| CVE-2026-27590 | CRITICAL | 9.8 | 0.5% | Feb 24, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's FastCGI path splitting... |
| CVE-2026-27589 | MEDIUM | 6.5 | 0.2% | Feb 24, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the local caddy admin API (def... |
| CVE-2026-27588 | CRITICAL | 9.1 | 0.4% | Feb 24, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP `host` request ma... |
| CVE-2026-27587 | CRITICAL | 9.1 | 0.4% | Feb 24, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP `path` request ma... |
| CVE-2026-27586 | CRITICAL | 9.1 | 0.3% | Feb 24, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, two swallowed errors in `Clien... |
| CVE-2026-27585 | MEDIUM | 6.5 | 0.3% | Feb 24, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the path sanitization routine ... |
| CVE-2026-27571 | HIGH | 7.5 | 0.5% | Feb 24, 2026 | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The WebSockets handling ... |
| CVE-2026-27521 | HIGH | 7.5 | 0.2% | Feb 24, 2026 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or accoun... |
| CVE-2026-27520 | HIGH | 8.7 | 0.2% | Feb 24, 2026 | Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side c... |
| CVE-2026-27519 | HIGH | 8.7 | 0.2% | Feb 24, 2026 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded i... |
| CVE-2026-27518 | MEDIUM | 5.1 | 0.1% | Feb 24, 2026 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior lack CSRF protections for state-changing... |
| CVE-2026-27517 | MEDIUM | 6.1 | 0.1% | Feb 24, 2026 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the we... |
| CVE-2026-27516 | HIGH | 8.6 | 0.2% | Feb 24, 2026 | Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext withi... |
| CVE-2026-27515 | CRITICAL | 9.3 | 0.3% | Feb 24, 2026 | Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session ide... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now