2026 CVE Vulnerabilities
76,585 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-3069 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | A security vulnerability has been detected in itsourcecode Document Management System 1.0. Affected is an unknown functi... |
| CVE-2026-3068 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the f... |
| CVE-2026-3067 | HIGH | 8.8 | 0.5% | Feb 24, 2026 | A vulnerability has been found in HummerRisk up to 1.5.0. This issue affects the function extractTarGZ/extractZip of the... |
| CVE-2026-3066 | HIGH | 8.8 | 9.1% | Feb 24, 2026 | A flaw has been found in HummerRisk up to 1.5.0. This vulnerability affects the function fixedCommand of the file hummer... |
| CVE-2026-27461 | MEDIUM | 4.9 | 0.5% | Feb 24, 2026 | Pimcore is an Open Source Data & Experience Management Platform. In versions up to and including 11.5.14.1 and 12.3.2, t... |
| CVE-2026-3091 | HIGH | 7.3 | 0.1% | Feb 24, 2026 | An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read... |
| CVE-2026-3065 | HIGH | 8.8 | 24.1% | Feb 24, 2026 | A vulnerability was detected in HummerRisk up to 1.5.0. This affects the function CommandUtils.commonExecCmdWithResult o... |
| CVE-2026-3064 | HIGH | 8.8 | 14.4% | Feb 24, 2026 | A security vulnerability has been detected in HummerRisk up to 1.5.0. Affected by this issue is some unknown functionali... |
| CVE-2026-3057 | CRITICAL | 9.8 | 0.5% | Feb 24, 2026 | A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10. Affected is the function dateTotalForProje... |
| CVE-2026-3054 | MEDIUM | 6.1 | 0.4% | Feb 24, 2026 | A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4. This impacts an unknown function. The manipulation of the a... |
| CVE-2026-27129 | MEDIUM | 6.5 | 0.4% | Feb 24, 2026 | Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, the SSRF... |
| CVE-2026-27128 | MEDIUM | 4.8 | 0.2% | Feb 24, 2026 | Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a Time-o... |
| CVE-2026-27127 | MEDIUM | 6.3 | 0.4% | Feb 24, 2026 | Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, the SSRF... |
| CVE-2026-27126 | MEDIUM | 4.8 | 0.2% | Feb 24, 2026 | Craft is a content management system (CMS). In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a stored... |
| CVE-2026-26983 | MEDIUM | 5.3 | 0.4% | Feb 24, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1... |
| CVE-2026-26981 | MEDIUM | 6.5 | 0.5% | Feb 24, 2026 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the ... |
| CVE-2026-26331 | HIGH | 8.8 | 1.6% | Feb 24, 2026 | yt-dlp is a command-line audio/video downloader. Starting in version 2023.06.21 and prior to version 2026.02.21, when yt... |
| CVE-2026-26284 | CRITICAL | 9.1 | 0.4% | Feb 24, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1... |
| CVE-2026-26283 | HIGH | 7.5 | 0.3% | Feb 24, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1... |
| CVE-2026-26198 | HIGH | 7.5 | 0.9% | Feb 24, 2026 | Ormar is a async mini ORM for Python. In versions 0.9.9 through 0.22.0, when performing aggregate queries, Ormar ORM con... |
| CVE-2026-26066 | HIGH | 7.5 | 0.3% | Feb 24, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1... |
| CVE-2026-25989 | HIGH | 7.5 | 0.6% | Feb 24, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1... |
| CVE-2026-1459 | HIGH | 7.2 | 0.9% | Feb 24, 2026 | A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG362... |
| CVE-2026-3053 | CRITICAL | 9.8 | 0.7% | Feb 24, 2026 | A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file di... |
| CVE-2026-3052 | HIGH | 7.7 | 0.3% | Feb 24, 2026 | A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file din... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now