2026 CVE Vulnerabilities
79,832 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27582 | — | — | — | Feb 27, 2026 | Rejected reason: Further research determined the situation described is not a vulnerability. |
| CVE-2026-27581 | — | — | — | Feb 27, 2026 | Rejected reason: Further research determined the situation described is not a vulnerability. |
| CVE-2026-27580 | — | — | — | Feb 27, 2026 | Rejected reason: Further research determined the situation described is not a vulnerability. |
| CVE-2026-27573 | — | — | — | Feb 27, 2026 | Rejected reason: Further research determined the situation described is not a vulnerability. |
| CVE-2026-27501 | — | — | — | Feb 27, 2026 | Rejected reason: Further research determined the situation described is not a vulnerability. |
| CVE-2026-27500 | — | — | — | Feb 27, 2026 | Rejected reason: Further research determined the situation described is not a vulnerability. |
| CVE-2026-27201 | — | — | — | Feb 27, 2026 | Rejected reason: Further research determined the situation described is not a vulnerability. |
| CVE-2026-27200 | — | — | — | Feb 27, 2026 | Rejected reason: Further research determined the situation described is not a vulnerability. |
| CVE-2026-26997 | MEDIUM | 5.4 | 0.2% | Feb 27, 2026 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, a normal authenticated user can stor... |
| CVE-2026-22717 | LOW | 2.7 | 0.2% | Feb 27, 2026 | Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administra... |
| CVE-2026-2880 | CRITICAL | 9.1 | 0.4% | Feb 27, 2026 | A vulnerability in @fastify/middie versions < 9.2.0 can result in authentication/authorization bypass when using path-sc... |
| CVE-2026-27758 | MEDIUM | 6.5 | 0.1% | Feb 27, 2026 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its man... |
| CVE-2026-27757 | HIGH | 7.2 | 0.3% | Feb 27, 2026 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authentic... |
| CVE-2026-27756 | MEDIUM | 6.1 | 0.2% | Feb 27, 2026 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the... |
| CVE-2026-27755 | CRITICAL | 9.8 | 0.4% | Feb 27, 2026 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability th... |
| CVE-2026-27754 | MEDIUM | 6.9 | 0.1% | Feb 27, 2026 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for sessio... |
| CVE-2026-22716 | MEDIUM | 5 | 0.2% | Feb 27, 2026 | Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administr... |
| CVE-2026-27753 | MEDIUM | 6.9 | 0.3% | Feb 27, 2026 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication bypass vulnerability that allows re... |
| CVE-2026-27752 | HIGH | 8.2 | 0.2% | Feb 27, 2026 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 transmit authentication credentials over unencrypted HTTP, al... |
| CVE-2026-27751 | CRITICAL | 9.8 | 0.4% | Feb 27, 2026 | SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remot... |
| CVE-2026-26862 | HIGH | 8.3 | 0.4% | Feb 27, 2026 | CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessag... |
| CVE-2026-26861 | HIGH | 8.3 | 0.2% | Feb 27, 2026 | CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS) via window.postMessage. The han... |
| CVE-2026-21619 | HIGH | 7.5 | 0.6% | Feb 27, 2026 | Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), ... |
| CVE-2026-2293 | CRITICAL | 9.8 | 0.7% | Feb 27, 2026 | A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fas... |
| CVE-2026-25147 | HIGH | 7.1 | 0.2% | Feb 27, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now