2026 CVE Vulnerabilities
78,973 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2915 | HIGH | 7.1 | 0.1% | Mar 3, 2026 | HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability ... |
| CVE-2026-2606 | MEDIUM | 6.5 | 0.3% | Mar 3, 2026 | IBM webMethods API Gateway (on-prem) 10.11 through 10.11_Fix3210.15 to 10.15_Fix2711.1 to 11.1_Fix7 IBM webMethods API M... |
| CVE-2026-29022 | HIGH | 7.8 | 0.2% | Mar 3, 2026 | dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in th... |
| CVE-2026-26892 | HIGH | 7.2 | 0.3% | Mar 3, 2026 | Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_carrier.php. |
| CVE-2026-26891 | LOW | 2.7 | 0.3% | Mar 3, 2026 | Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_parcel_type.php. |
| CVE-2026-26889 | LOW | 2.7 | 0.3% | Mar 3, 2026 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_category.php. |
| CVE-2026-26888 | LOW | 2.7 | 0.3% | Mar 3, 2026 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_stock.php. |
| CVE-2026-26887 | LOW | 2.7 | 0.3% | Mar 3, 2026 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_supplier.php. |
| CVE-2026-1265 | MEDIUM | 5.3 | 0.2% | Mar 3, 2026 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log f... |
| CVE-2026-0869 | HIGH | 8.8 | 0.4% | Mar 3, 2026 | Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Broca... |
| CVE-2026-3437 | HIGH | 7.8 | 0.2% | Mar 3, 2026 | An improper restriction of operations within the bounds of a memory buffer vulnerability in Portwell Engineering Toolkit... |
| CVE-2026-26890 | LOW | 2.7 | 0.3% | Mar 3, 2026 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_product.php. |
| CVE-2026-0540 | MEDIUM | 6.1 | 0.3% | Mar 3, 2026 | DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerabi... |
| CVE-2026-3136 | CRITICAL | 9.8 | 0.4% | Mar 3, 2026 | An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allow... |
| CVE-2026-26886 | LOW | 2.7 | 0.2% | Mar 3, 2026 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manage_servic... |
| CVE-2026-26885 | LOW | 2.7 | 0.2% | Mar 3, 2026 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=delete_... |
| CVE-2026-26884 | LOW | 2.7 | 0.2% | Mar 3, 2026 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view... |
| CVE-2026-26883 | LOW | 2.7 | 0.2% | Mar 3, 2026 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=de... |
| CVE-2026-3465 | LOW | 3.1 | 0.3% | Mar 3, 2026 | A vulnerability was determined in Tuya App and SDK 24.07.11 on Android. Affected by this vulnerability is an unknown fun... |
| CVE-2026-2637 | HIGH | 7.8 | 0.2% | Mar 3, 2026 | iBoysoft NTFS for Mac contains a local privilege escalation vulnerability in its privileged helper daemon ntfshelperd. T... |
| CVE-2026-28518 | HIGH | 7.8 | 0.2% | Mar 3, 2026 | OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack impo... |
| CVE-2026-25674 | LOW | 3.7 | 0.3% | Mar 3, 2026 | An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system sto... |
| CVE-2026-25673 | HIGH | 7.5 | 0.7% | Mar 3, 2026 | An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. `URLField.to_python()` in Django ... |
| CVE-2026-24103 | CRITICAL | 9.8 | 0.4% | Mar 3, 2026 | A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi. |
| CVE-2026-22891 | CRITICAL | 9.8 | 0.6% | Mar 3, 2026 | A heap-based buffer overflow vulnerability exists in the Intan CLP parsing functionality of The Biosig Project libbiosig... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now