2026 CVE Vulnerabilities
43,261 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-19243 | MEDIUM | 6.3 | 1.6% | Aug 7, 2026 | A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_comman... |
| CVE-2026-19113 | MEDIUM | 5.3 | 0.3% | Aug 7, 2026 | Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of servic... |
| CVE-2026-19017 | MEDIUM | 6.8 | 0.3% | Aug 7, 2026 | Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read whe... |
| CVE-2026-19016 | MEDIUM | 4.2 | 0.2% | Aug 7, 2026 | Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission... |
| CVE-2026-19015 | MEDIUM | 5.3 | 0.3% | Aug 7, 2026 | Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are vulnerable to an uncontrolled resource consumptio... |
| CVE-2026-19014 | MEDIUM | 4.3 | 0.3% | Aug 7, 2026 | Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vulnerable to an uncontrolled resource consumpti... |
| CVE-2026-19012 | MEDIUM | 5.3 | 0.2% | Aug 7, 2026 | Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service... |
| CVE-2026-15970 | MEDIUM | 4.2 | 0.2% | Aug 7, 2026 | Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypa... |
| CVE-2026-71852 | MEDIUM | 4.8 | 0.1% | Aug 7, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and larg... |
| CVE-2026-71850 | MEDIUM | 4.8 | 0.2% | Aug 7, 2026 | Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo() from... |
| CVE-2026-71848 | MEDIUM | 5.3 | — | Aug 7, 2026 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the langua... |
| CVE-2026-69127 | MEDIUM | 6.9 | 0.3% | Aug 7, 2026 | Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5.5.1, the REST API error handl... |
| CVE-2026-66058 | MEDIUM | 5.3 | 0.2% | Aug 7, 2026 | Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, unrestricted access to a Document Follo... |
| CVE-2026-56818 | MEDIUM | 6.5 | — | Aug 7, 2026 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the Redis... |
| CVE-2026-47364 | MEDIUM | 6.5 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datado... |
| CVE-2026-47363 | MEDIUM | 6.3 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts a... |
| CVE-2026-47362 | MEDIUM | 4.6 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive con... |
| CVE-2026-47361 | MEDIUM | 6.4 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission gu... |
| CVE-2026-44965 | MEDIUM | 5.5 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWid... |
| CVE-2026-44964 | MEDIUM | 6.5 | — | Aug 7, 2026 | In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with... |
| CVE-2026-19229 | MEDIUM | 5.5 | 0.3% | Aug 7, 2026 | A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functiona... |
| CVE-2026-19213 | MEDIUM | 4.3 | 0.2% | Aug 7, 2026 | A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty in the library src/WtCo... |
| CVE-2026-71557 | MEDIUM | 6.3 | — | Aug 7, 2026 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference name... |
| CVE-2026-66062 | MEDIUM | 5.3 | — | Aug 7, 2026 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.70.2, the c... |
| CVE-2026-19212 | MEDIUM | 4.3 | 0.3% | Aug 7, 2026 | A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WT... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now