2026 CVE Vulnerabilities

78,281 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-26417HIGH8.1A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Clie...
CVE-2026-26416HIGH8.8An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users t...
CVE-2026-26276MEDIUM5.4Gogs is an open source self-hosted Git service. Prior to version 0.14.2, an attacker can store an HTML/JavaScript payloa...
CVE-2026-26196MEDIUM5.3Gogs is an open source self-hosted Git service. Prior to version 0.14.2, gogs api still accepts tokens in url params lik...
CVE-2026-26195MEDIUM6.1Gogs is an open source self-hosted Git service. Prior to version 0.14.2, stored xss is still possible through unsafe tem...
CVE-2026-26194HIGH7.3Gogs is an open source self-hosted Git service. Prior to version 0.14.2, there's a security issue in gogs where deleting...
CVE-2026-26022MEDIUM5.4Gogs is an open source self-hosted Git service. Prior to version 0.14.2, a stored cross-site scripting (XSS) vulnerabili...
CVE-2026-25921CRITICAL9.3Gogs is an open source self-hosted Git service. Prior to version 0.14.2, overwritable LFS object across different repos ...
CVE-2026-24457CRITICAL9.8An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbit...
CVE-2026-30798HIGH7.5Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-cl...
CVE-2026-30797HIGH8.1Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, An...
CVE-2026-30796HIGH7.5Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client R...
CVE-2026-30795HIGH7.5Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Wind...
CVE-2026-30794——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-30793CRITICAL9.8Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Li...
CVE-2026-30792HIGH8.1A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (St...
CVE-2026-30790——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-30789CRITICAL9.8Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts v...
CVE-2026-30785MEDIUM5.5Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Ins...
CVE-2026-30784——Rejected reason: This CVE ID has been withdrawn by its CVE Numbering Authority.
CVE-2026-30783CRITICAL9.8A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Cl...
CVE-2026-26377MEDIUM5.4Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the N...
CVE-2026-25048HIGH7.5xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32,...
CVE-2026-3598HIGH7.5Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-server-pro RustDesk Server Pro rustdesk-serve...
CVE-2026-30791HIGH7.5Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Win...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now