2026 CVE Vulnerabilities
83,464 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-3061 | CRITICAL | 9.1 | 0.3% | Feb 23, 2026 | Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of boun... |
| CVE-2026-21665 | HIGH | 7.7 | 0.4% | Feb 23, 2026 | The Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in unsupported version 20... |
| CVE-2026-3041 | LOW | 2.4 | 0.3% | Feb 23, 2026 | A security vulnerability has been detected in xingfuggz BaykeShop up to 1.3.20. Impacted is an unknown function of the f... |
| CVE-2026-3040 | HIGH | 7.2 | 9.1% | Feb 23, 2026 | A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the function cgiGetFile of the file /cg... |
| CVE-2026-3028 | MEDIUM | 6.1 | 0.3% | Feb 23, 2026 | A vulnerability was determined in erzhongxmu JEEWMS up to 3.7. This vulnerability affects the function doAdd of the file... |
| CVE-2026-27742 | MEDIUM | 5.4 | 0.1% | Feb 23, 2026 | Bludit version 3.16.2 contains a stored cross-site scripting (XSS) vulnerability in the post content functionality. The ... |
| CVE-2026-27741 | MEDIUM | 4.3 | 0.1% | Feb 23, 2026 | Bludit version 3.16.1 contains a cross-site request forgery (CSRF) vulnerability in the /admin/uninstall-plugin/ and /ad... |
| CVE-2026-27163 | — | — | — | Feb 23, 2026 | Rejected reason: This CVE was assigned in error. |
| CVE-2026-25984 | — | — | — | Feb 23, 2026 | Rejected reason: This CVE was assigned in error. |
| CVE-2026-25649 | HIGH | 8.7 | 0.1% | Feb 23, 2026 | Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticat... |
| CVE-2026-3075 | MEDIUM | 5.3 | 0.3% | Feb 23, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat ... |
| CVE-2026-3027 | MEDIUM | 6.1 | 0.3% | Feb 23, 2026 | A vulnerability was found in erzhongxmu JEEWMS up to 3.7. This affects an unknown part of the file src/main/webapp/plug-... |
| CVE-2026-3026 | HIGH | 7.3 | 0.4% | Feb 23, 2026 | A vulnerability has been found in erzhongxmu JEEWMS 3.7. Affected by this issue is some unknown functionality of the fil... |
| CVE-2026-3025 | CRITICAL | 9.8 | 0.4% | Feb 23, 2026 | A flaw has been found in ShuoRen Smart Heating Integrated Management Platform 1.0.0. Affected by this vulnerability is a... |
| CVE-2026-25648 | HIGH | 8.7 | 0.3% | Feb 23, 2026 | Versions of the Traccar open-source GPS tracking system starting with 6.11.1 contain an issue in which authenticated use... |
| CVE-2026-23694 | MEDIUM | 5.1 | 0.2% | Feb 23, 2026 | Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery ... |
| CVE-2026-23693 | CRITICAL | 10 | 0.4% | Feb 23, 2026 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin ver... |
| CVE-2026-23521 | MEDIUM | 6.5 | 0.3% | Feb 23, 2026 | Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticat... |
| CVE-2026-27623 | HIGH | 7.5 | 0.4% | Feb 23, 2026 | Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with... |
| CVE-2026-21863 | HIGH | 7.5 | 0.6% | Feb 23, 2026 | Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with ac... |
| CVE-2026-26464 | MEDIUM | 6.1 | 0.2% | Feb 23, 2026 | Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, w... |
| CVE-2026-2698 | MEDIUM | 6.5 | 0.2% | Feb 23, 2026 | An improper access control vulnerability exists where an authenticated user could access areas outside of their authoriz... |
| CVE-2026-27514 | HIGH | 7.1 | 0.2% | Feb 23, 2026 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive information exposure vulnerability in... |
| CVE-2026-27513 | MEDIUM | 5.1 | 0.1% | Feb 23, 2026 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability... |
| CVE-2026-27512 | MEDIUM | 6.1 | 0.2% | Feb 23, 2026 | Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability in the adm... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now