2026 CVE Vulnerabilities
83,468 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27193 | MEDIUM | 5.3 | 0.4% | Feb 21, 2026 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.... |
| CVE-2026-27192 | HIGH | 8.1 | 0.2% | Feb 21, 2026 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In versions 5.... |
| CVE-2026-27191 | MEDIUM | 6.1 | 0.3% | Feb 21, 2026 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Versions 5.0.3... |
| CVE-2026-27203 | HIGH | 8.3 | 0.4% | Feb 21, 2026 | eBay API MCP Server is an open source local MCP server providing AI assistants with comprehensive access to eBay's Sell ... |
| CVE-2026-27202 | HIGH | 7.5 | 0.5% | Feb 21, 2026 | GetSimple CMS is a content management system. All versions of GetSimple CMS have a flaw in the Uploaded Files feature th... |
| CVE-2026-27189 | MEDIUM | 5.8 | 0.1% | Feb 21, 2026 | OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-a... |
| CVE-2026-27170 | HIGH | 7.1 | 0.2% | Feb 21, 2026 | OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.... |
| CVE-2026-27169 | HIGH | 8.9 | 0.3% | Feb 21, 2026 | OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-a... |
| CVE-2026-27168 | CRITICAL | 9.8 | 0.4% | Feb 21, 2026 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. A... |
| CVE-2026-27161 | HIGH | 7.5 | 0.4% | Feb 21, 2026 | GetSimple CMS is a content management system. All versions of GetSimple CMS rely on .htaccess files to restrict access t... |
| CVE-2026-27147 | MEDIUM | 5.4 | 0.2% | Feb 21, 2026 | GetSimple CMS is a content management system. All versions of GetSimple CMS are vulnerable to XSS through SVG file uploa... |
| CVE-2026-27146 | MEDIUM | 4.5 | 0.2% | Feb 21, 2026 | GetSimple CMS is a content management system. All versions of GetSimple CMS do not implement CSRF protection on the admi... |
| CVE-2026-27134 | HIGH | 8.1 | 0.4% | Feb 21, 2026 | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I... |
| CVE-2026-2635 | CRITICAL | 9.8 | 1.0% | Feb 20, 2026 | MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass... |
| CVE-2026-2492 | HIGH | 7.8 | 0.3% | Feb 20, 2026 | TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability al... |
| CVE-2026-2490 | MEDIUM | 5.5 | 0.3% | Feb 20, 2026 | RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability. This vulnerability allows... |
| CVE-2026-2048 | HIGH | 7.8 | 0.6% | Feb 20, 2026 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attacker... |
| CVE-2026-2047 | HIGH | 7.8 | 0.6% | Feb 20, 2026 | GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote ... |
| CVE-2026-2045 | HIGH | 7.8 | 0.6% | Feb 20, 2026 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attacker... |
| CVE-2026-2044 | HIGH | 8.8 | 1.0% | Feb 20, 2026 | GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attacke... |
| CVE-2026-2043 | HIGH | 8.8 | 74.2% | Feb 20, 2026 | Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerabili... |
| CVE-2026-2042 | HIGH | 8.8 | 5.5% | Feb 20, 2026 | Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote att... |
| CVE-2026-2041 | HIGH | 8.8 | 74.6% | Feb 20, 2026 | Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allo... |
| CVE-2026-2040 | HIGH | 7.3 | 0.3% | Feb 20, 2026 | PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnera... |
| CVE-2026-2039 | CRITICAL | 9.8 | 0.7% | Feb 20, 2026 | GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote atta... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now