2026 CVE Vulnerabilities
47,534 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-14641 | HIGH | 7.3 | 0.4% | Jul 4, 2026 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability i... |
| CVE-2026-14640 | HIGH | 7.3 | 0.3% | Jul 4, 2026 | A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the f... |
| CVE-2026-14637 | HIGH | 8.2 | 0.6% | Jul 4, 2026 | A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0... |
| CVE-2026-12746 | HIGH | 8.1 | 0.2% | Jul 4, 2026 | Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The ... |
| CVE-2026-12740 | HIGH | 8.1 | 0.1% | Jul 4, 2026 | Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 bu... |
| CVE-2026-14635 | HIGH | 7.3 | 0.4% | Jul 4, 2026 | A security flaw has been discovered in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 222ff31c06687b1c6d0e1ab63953f82... |
| CVE-2026-14534 | HIGH | 8.8 | 0.3% | Jul 4, 2026 | Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubp... |
| CVE-2026-53362 | HIGH | 7.8 | 0.3% | Jul 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation p... |
| CVE-2026-53361 | HIGH | 7.1 | 0.1% | Jul 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Set gc_in_progress to true in unix_gc(). ... |
| CVE-2026-53360 | HIGH | 8.8 | 0.2% | Jul 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ ... |
| CVE-2026-53359 | HIGH | 8.8 | 0.9% | Jul 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to u... |
| CVE-2026-12196 | HIGH | 8.3 | 0.3% | Jul 4, 2026 | HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the ... |
| CVE-2026-12195 | HIGH | 8.5 | 0.7% | Jul 4, 2026 | myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary c... |
| CVE-2026-14622 | HIGH | 7.3 | 0.5% | Jul 4, 2026 | A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. Th... |
| CVE-2026-12252 | HIGH | 7.8 | 0.1% | Jul 4, 2026 | In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, Stanford... |
| CVE-2026-54424 | HIGH | 8.4 | 0.2% | Jul 4, 2026 | An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Pri... |
| CVE-2026-58424 | HIGH | 8.9 | 0.2% | Jul 3, 2026 | Permanent Fork PR Workflow Approval Gate Bypass |
| CVE-2026-58423 | HIGH | 7.7 | 0.3% | Jul 3, 2026 | LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories |
| CVE-2026-58421 | HIGH | 7.5 | 0.2% | Jul 3, 2026 | Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service |
| CVE-2026-58419 | HIGH | 7.5 | 0.2% | Jul 3, 2026 | Notification API leaks private issue metadata after access revocation |
| CVE-2026-58299 | HIGH | 7.5 | 0.3% | Jul 3, 2026 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execu... |
| CVE-2026-58297 | HIGH | 7.1 | 0.3% | Jul 3, 2026 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized a... |
| CVE-2026-58296 | HIGH | 7.1 | 0.3% | Jul 3, 2026 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized a... |
| CVE-2026-58295 | HIGH | 8.3 | 0.4% | Jul 3, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized ... |
| CVE-2026-58294 | HIGH | 7.5 | 0.3% | Jul 3, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now