2026 CVE Vulnerabilities

80,003 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-3027MEDIUM6.1A vulnerability was found in erzhongxmu JEEWMS up to 3.7. This affects an unknown part of the file src/main/webapp/plug-...
CVE-2026-3026HIGH7.3A vulnerability has been found in erzhongxmu JEEWMS 3.7. Affected by this issue is some unknown functionality of the fil...
CVE-2026-3025CRITICAL9.8A flaw has been found in ShuoRen Smart Heating Integrated Management Platform 1.0.0. Affected by this vulnerability is a...
CVE-2026-25648HIGH8.7Versions of the Traccar open-source GPS tracking system starting with 6.11.1 contain an issue in which authenticated use...
CVE-2026-23694MEDIUM5.1Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery ...
CVE-2026-23693CRITICAL10ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin ver...
CVE-2026-23521MEDIUM6.5Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticat...
CVE-2026-27623HIGH7.5Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with...
CVE-2026-21863HIGH7.5Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with ac...
CVE-2026-26464MEDIUM6.1Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, w...
CVE-2026-2698MEDIUM6.5An improper access control vulnerability exists where an authenticated user could access areas outside of their authoriz...
CVE-2026-27514HIGH7.1Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive information exposure vulnerability in...
CVE-2026-27513MEDIUM5.1Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability...
CVE-2026-27512MEDIUM6.1Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability in the adm...
CVE-2026-27511MEDIUM5.1Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based adm...
CVE-2026-22568LOW2.7Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated ...
CVE-2026-22567LOW2.7Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate ba...
CVE-2026-3016HIGH8.8A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the ...
CVE-2026-3015HIGH8.8A vulnerability was determined in UTT HiPER 810G up to 1.7.7-171114. Impacted is the function strcpy of the file /goform...
CVE-2026-2697HIGH8.8An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges vi...
CVE-2026-21420HIGH7.8Dell Repository Manager (DRM), versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability. A lo...
CVE-2026-2985MEDIUM6.3A security flaw has been discovered in Tiandy Video Surveillance System 视频监控平台 7.17.0. This impacts the function downloa...
CVE-2026-2984MEDIUM6.5A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function ...
CVE-2026-2983CRITICAL9.8A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknow...
CVE-2026-2981HIGH8.8A vulnerability was found in UTT HiPER 810G up to 1.7.7-1711. The affected element is the function strcpy of the file /g...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now