2026 CVE Vulnerabilities
83,467 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2869 | MEDIUM | 5.5 | 0.2% | Feb 21, 2026 | A vulnerability was identified in janet-lang janet up to 1.40.1. Affected by this vulnerability is the function janetc_v... |
| CVE-2026-2867 | CRITICAL | 9.8 | 0.3% | Feb 21, 2026 | A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the fil... |
| CVE-2026-27579 | HIGH | 7.4 | 0.2% | Feb 21, 2026 | CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite pr... |
| CVE-2026-27574 | CRITICAL | 9.9 | 0.5% | Feb 21, 2026 | OneUptime is a solution for monitoring and managing online services. In versions 9.5.13 and below, custom JavaScript mon... |
| CVE-2026-27492 | MEDIUM | 4.7 | 0.2% | Feb 21, 2026 | Lettermint Node.js SDK is the official Node.js SDK for Lettermint. In versions 1.5.0 and below, email properties (such a... |
| CVE-2026-1787 | MEDIUM | 4.8 | 0.2% | Feb 21, 2026 | The LearnPress Export Import – WordPress extension for LearnPress plugin for WordPress is vulnerable to unauthorized los... |
| CVE-2026-27576 | MEDIUM | 4 | 0.2% | Feb 21, 2026 | OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, the ACP bridge accepts very large prompt text bloc... |
| CVE-2026-27488 | HIGH | 7.3 | 0.3% | Feb 21, 2026 | OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, Cron webhook delivery in src/gateway/server-cron.t... |
| CVE-2026-27487 | HIGH | 8 | 1.2% | Feb 21, 2026 | OpenClaw is a personal AI assistant. In versions 2026.2.13 and below, when using macOS, the Claude CLI keychain credenti... |
| CVE-2026-27486 | MEDIUM | 5.3 | 0.3% | Feb 21, 2026 | OpenClaw is a personal AI assistant. In versions 2026.2.13 and below of the OpenClaw CLI, the process cleanup uses syste... |
| CVE-2026-27485 | MEDIUM | 4.4 | 0.2% | Feb 21, 2026 | OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, skills/skill-creator/scripts/package_skill.py (a l... |
| CVE-2026-27484 | MEDIUM | 4.3 | 0.2% | Feb 21, 2026 | OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, the Discord moderation action handling (timeout, k... |
| CVE-2026-27482 | MEDIUM | 6.5 | 0.3% | Feb 21, 2026 | Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but d... |
| CVE-2026-27480 | MEDIUM | 5.3 | 0.3% | Feb 21, 2026 | Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. In versions 2.1.0 thro... |
| CVE-2026-27479 | HIGH | 7.7 | 0.3% | Feb 21, 2026 | Wallos is an open-source, self-hostable personal subscription tracker. Versions 4.6.0 and below contain a Server-Side Re... |
| CVE-2026-2865 | CRITICAL | 9.8 | 0.3% | Feb 21, 2026 | A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of t... |
| CVE-2026-2864 | MEDIUM | 5.4 | 0.3% | Feb 21, 2026 | A vulnerability has been found in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07... |
| CVE-2026-27470 | HIGH | 8.8 | 0.5% | Feb 21, 2026 | ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37... |
| CVE-2026-27469 | MEDIUM | 6.1 | 0.2% | Feb 21, 2026 | Isso is a lightweight commenting server written in Python and JavaScript. In commits before 0afbfe0691ee237963e8fb0b2ee0... |
| CVE-2026-27467 | LOW | 2.4 | 0.2% | Feb 21, 2026 | BigBlueButton is an open-source virtual classroom. In versions 3.0.19 and below, when first joining a session with the m... |
| CVE-2026-27466 | HIGH | 8.2 | 0.4% | Feb 21, 2026 | BigBlueButton is an open-source virtual classroom. In versions 3.0.21 and below, the official documentation for "Server ... |
| CVE-2026-27464 | MEDIUM | 6.5 | 0.3% | Feb 21, 2026 | Metabase is an open-source data analytics platform. In versions prior to 0.57.13 and versions 0.58.x through 0.58.6, aut... |
| CVE-2026-27471 | CRITICAL | 9.1 | 0.3% | Feb 21, 2026 | ERP is a free and open source Enterprise Resource Planning tool. In versions up to 15.98.0 and 16.0.0-rc.1 and through 1... |
| CVE-2026-27458 | MEDIUM | 5.4 | 0.2% | Feb 21, 2026 | LinkAce is a self-hosted archive to collect website links. Versions 2.4.2 and below have a Stored Cross-site Scripting v... |
| CVE-2026-27452 | MEDIUM | 5.3 | 0.3% | Feb 21, 2026 | ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER). In... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now