2026 CVE Vulnerabilities

83,467 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-27206HIGH8.1Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library a...
CVE-2026-2863MEDIUM5.4A flaw has been found in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. T...
CVE-2026-2861MEDIUM5.5A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Chang...
CVE-2026-27212HIGH7.8Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. Versions 6.5.1 throu...
CVE-2026-27211CRITICAL10Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. Versions 34.0 through 50.0 arevulnerable to arbitrary...
CVE-2026-27210MEDIUM6.1Pannellum is a lightweight, free, and open source panorama viewer for the web. In versions 3.5.0 through 2.5.6, the hot ...
CVE-2026-27205MEDIUM4.3Flask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session ...
CVE-2026-27199MEDIUM5.3Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safe_join function allows Window...
CVE-2026-27198HIGH8.8Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application fails to...
CVE-2026-26047MEDIUM6.5A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimete...
CVE-2026-26046HIGH7.2A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration...
CVE-2026-26045HIGH7.2A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly va...
CVE-2026-2860MEDIUM6.3A security vulnerability has been detected in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d07...
CVE-2026-27534——Rejected reason: Not used
CVE-2026-27533——Rejected reason: Not used
CVE-2026-27532——Rejected reason: Not used
CVE-2026-27531——Rejected reason: Not used
CVE-2026-27530——Rejected reason: Not used
CVE-2026-27529——Rejected reason: Not used
CVE-2026-27528——Rejected reason: Not used
CVE-2026-27527——Rejected reason: Not used
CVE-2026-27197CRITICAL9.1Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have a criti...
CVE-2026-27196MEDIUM4.8Statmatic is a Laravel and Git powered content management system (CMS). Versions 5.73.8 and below in addition to 6.0.0-a...
CVE-2026-27194CRITICAL9.8D-Tale is a visualizer for pandas data structures. Versions prior to 3.20.0 are vulnerable to Remote Code Execution thro...
CVE-2026-27193MEDIUM5.3Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5....

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now