2026 CVE Vulnerabilities
81,198 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-3337 | HIGH | 8.2 | 1.1% | Mar 2, 2026 | Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine au... |
| CVE-2026-3336 | HIGH | 8.7 | 0.8% | Mar 2, 2026 | Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain v... |
| CVE-2026-2256 | MEDIUM | 6.5 | 1.6% | Mar 2, 2026 | A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker t... |
| CVE-2026-27631 | MEDIUM | 5.3 | 0.3% | Mar 2, 2026 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metada... |
| CVE-2026-27596 | HIGH | 7.5 | 0.4% | Mar 2, 2026 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metada... |
| CVE-2026-26713 | CRITICAL | 9.8 | 0.3% | Mar 2, 2026 | code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/cancel-order.php. |
| CVE-2026-26712 | CRITICAL | 9.8 | 0.3% | Mar 2, 2026 | code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket-admin.php. |
| CVE-2026-25884 | HIGH | 8.1 | 0.3% | Mar 2, 2026 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metada... |
| CVE-2026-25477 | MEDIUM | 6.1 | 0.2% | Mar 2, 2026 | AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.26.0, there is an Open Redire... |
| CVE-2026-21882 | HIGH | 8.4 | 0.2% | Mar 2, 2026 | theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to versi... |
| CVE-2026-26711 | CRITICAL | 9.8 | 0.3% | Mar 2, 2026 | code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/view-ticket.php. |
| CVE-2026-26710 | CRITICAL | 9.8 | 0.3% | Mar 2, 2026 | code-projects Simple Food Order System v1.0 is vulnerable to SQL Injection in /food/routers/edit-orders.php. |
| CVE-2026-26709 | CRITICAL | 9.8 | 0.3% | Mar 2, 2026 | code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer_search.php. |
| CVE-2026-21853 | HIGH | 8.8 | 0.6% | Mar 2, 2026 | AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.25.4, there is a one-click re... |
| CVE-2026-0047 | HIGH | 8.4 | 0.1% | Mar 2, 2026 | In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due... |
| CVE-2026-0038 | HIGH | 8.4 | 0.2% | Mar 2, 2026 | In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the co... |
| CVE-2026-0037 | HIGH | 8.4 | 0.2% | Mar 2, 2026 | In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead ... |
| CVE-2026-0035 | HIGH | 8.4 | 0.1% | Mar 2, 2026 | In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing fil... |
| CVE-2026-0034 | HIGH | 8.4 | 0.1% | Mar 2, 2026 | In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper ... |
| CVE-2026-0032 | HIGH | 7.8 | 0.1% | Mar 2, 2026 | In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This c... |
| CVE-2026-0031 | HIGH | 8.4 | 0.2% | Mar 2, 2026 | In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could l... |
| CVE-2026-0030 | HIGH | 8.4 | 0.2% | Mar 2, 2026 | In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds ch... |
| CVE-2026-0029 | HIGH | 8.4 | 0.1% | Mar 2, 2026 | In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code. This could lead to ... |
| CVE-2026-0028 | HIGH | 8.4 | 0.2% | Mar 2, 2026 | In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This co... |
| CVE-2026-0027 | MEDIUM | 6.7 | 0.1% | Mar 2, 2026 | In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free. This could lead to... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now