2026 CVE Vulnerabilities
78,973 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27600 | MEDIUM | 4.3 | 0.2% | Mar 3, 2026 | HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, the notifier functionality allows authenticat... |
| CVE-2026-26279 | CRITICAL | 9.1 | 0.8% | Mar 3, 2026 | Froxlor is open source server administration software. Prior to 2.3.4, a typo in Froxlor's input validation code (== ins... |
| CVE-2026-26272 | MEDIUM | 5.4 | 0.2% | Mar 3, 2026 | HomeBox is a home inventory and organization system. Prior to 0.24.0-rc.1, a stored cross-site scripting (XSS) vulnerabi... |
| CVE-2026-26266 | MEDIUM | 6.1 | 0.2% | Mar 3, 2026 | AliasVault is a privacy-first password manager with built-in email aliasing. A stored cross-site scripting (XSS) vulnera... |
| CVE-2026-25590 | MEDIUM | 6.1 | 0.2% | Mar 3, 2026 | The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents... |
| CVE-2026-3487 | HIGH | 7.2 | 0.4% | Mar 3, 2026 | A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of t... |
| CVE-2026-3224 | CRITICAL | 9.8 | 0.5% | Mar 3, 2026 | Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and ear... |
| CVE-2026-3204 | CRITICAL | 9.8 | 0.5% | Mar 3, 2026 | Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers... |
| CVE-2026-3130 | CRITICAL | 9.8 | 0.4% | Mar 3, 2026 | Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker... |
| CVE-2026-2590 | CRITICAL | 9.8 | 0.4% | Mar 3, 2026 | Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions... |
| CVE-2026-27012 | CRITICAL | 9.8 | 0.5% | Mar 3, 2026 | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a pri... |
| CVE-2026-25146 | HIGH | 8.1 | 0.4% | Mar 3, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. From 5.0.2 to b... |
| CVE-2026-24898 | CRITICAL | 9.8 | 0.6% | Mar 3, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0,... |
| CVE-2026-24848 | CRITICAL | 9.9 | 6.8% | Mar 3, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. In 7.0.4 and ea... |
| CVE-2026-24415 | MEDIUM | 6.1 | 0.2% | Mar 3, 2026 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and e... |
| CVE-2026-21866 | MEDIUM | 5.4 | 0.2% | Mar 3, 2026 | Dify is an open-source LLM app development platform. Prior to 1.11.2, Dify is vulnerable to a stored XSS issue when rend... |
| CVE-2026-1775 | HIGH | 8.8 | 0.8% | Mar 3, 2026 | The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attac... |
| CVE-2026-3486 | HIGH | 7.2 | 0.3% | Mar 3, 2026 | A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of... |
| CVE-2026-3485 | CRITICAL | 9.8 | 4.7% | Mar 3, 2026 | A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This... |
| CVE-2026-25906 | HIGH | 7.8 | 0.2% | Mar 3, 2026 | Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulne... |
| CVE-2026-24502 | HIGH | 7.8 | 0.2% | Mar 3, 2026 | Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerabilit... |
| CVE-2026-1713 | MEDIUM | 5 | 0.1% | Mar 3, 2026 | IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 ... |
| CVE-2026-1567 | HIGH | 7.5 | 0.3% | Mar 3, 2026 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere... |
| CVE-2026-3494 | MEDIUM | 4.3 | 0.4% | Mar 3, 2026 | In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configur... |
| CVE-2026-3484 | HIGH | 8.8 | 2.6% | Mar 3, 2026 | A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now