2026 CVE Vulnerabilities

81,409 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-3391MEDIUM5.5A security flaw has been discovered in FascinatedBox lily up to 2.3. Impacted is the function clear_storages of the file...
CVE-2026-3390MEDIUM5.5A vulnerability was identified in FascinatedBox lily up to 2.3. This issue affects the function patch_line_end of the fi...
CVE-2026-3389MEDIUM5.5A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the l...
CVE-2026-3388MEDIUM5.5A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the...
CVE-2026-3387MEDIUM5.5A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArgu...
CVE-2026-3386HIGH7.1A flaw has been found in wren-lang wren up to 0.4.0. Affected by this vulnerability is the function emitOp of the file s...
CVE-2026-3385MEDIUM5.5A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wre...
CVE-2026-3384MEDIUM5.5A security vulnerability has been detected in ChaiScript up to 6.1.0. This impacts the function chaiscript::eval::AST_No...
CVE-2026-3383MEDIUM5.5A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the ...
CVE-2026-3382MEDIUM5.5A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::Boxed_Nu...
CVE-2026-3380HIGH8.8A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. T...
CVE-2026-3379HIGH8.8A vulnerability has been found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSetIpBind of the file ...
CVE-2026-3378HIGH8.8A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Ex...
CVE-2026-3377HIGH8.8A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function fromSafeUrlFilter of the file...
CVE-2026-3376HIGH8.8A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromSaf...
CVE-2026-28562CRITICAL9.8wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause ...
CVE-2026-28561MEDIUM4.8wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent...
CVE-2026-28560MEDIUM4.8wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data...
CVE-2026-28559MEDIUM6.9wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve priva...
CVE-2026-28558MEDIUM5.4wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload...
CVE-2026-28557HIGH7.1wpForo Forum 2.4.14 contains a missing capability check vulnerability that allows authenticated users to trigger bulk wp...
CVE-2026-28556MEDIUM5.4wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to move, merge,...
CVE-2026-28555MEDIUM5.3wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to close or reo...
CVE-2026-28554MEDIUM5.3wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to approve or u...
CVE-2026-3010MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip T...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now