2026 CVE Vulnerabilities

79,947 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-27148CRITICAL9.6Storybook is a frontend workshop for building user interface components and pages in isolation. Prior to versions 7.6.23...
CVE-2026-27116MEDIUM6.1Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, a reflected HTML injection vulne...
CVE-2026-26986HIGH7.5FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `rail_window_free` dereference...
CVE-2026-26985MEDIUM6.5LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project...
CVE-2026-26984HIGH8.8LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project...
CVE-2026-3200HIGH7.3A vulnerability was identified in z-9527 admin 1.0/2.0. The affected element is the function checkName/register/login/ge...
CVE-2026-3172HIGH8.1Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive da...
CVE-2026-2845MEDIUM6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18....
CVE-2026-27015MEDIUM6.5FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in `sma...
CVE-2026-26965HIGH8.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path,...
CVE-2026-26955HIGH8.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can tri...
CVE-2026-26271MEDIUM5.3FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_...
CVE-2026-25997CRITICAL9.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_clipboard_format_equal` re...
CVE-2026-25959CRITICAL9.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_cliprdr_provide_data_` pas...
CVE-2026-25955CRITICAL9.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface...
CVE-2026-25954HIGH7.5FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_local_move_siz...
CVE-2026-25953CRITICAL9.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_AppUpdateWindowFromSurface...
CVE-2026-25952CRITICAL9.8FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_SetWindowMinMaxInfo` deref...
CVE-2026-25942HIGH7.5FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, `xf_rail_server_execute_result...
CVE-2026-22721HIGH7.2VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to ac...
CVE-2026-1747MEDIUM4.3GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18....
CVE-2026-1725HIGH7.5GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain ...
CVE-2026-1662HIGH7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 1...
CVE-2026-1388HIGH7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18...
CVE-2026-0752MEDIUM6.1GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 1...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now