2026 CVE Vulnerabilities

83,481 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-27134HIGH8.1Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. I...
CVE-2026-2635CRITICAL9.8MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass...
CVE-2026-2492HIGH7.8TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability al...
CVE-2026-2490MEDIUM5.5RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability. This vulnerability allows...
CVE-2026-2048HIGH7.8GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attacker...
CVE-2026-2047HIGH7.8GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote ...
CVE-2026-2045HIGH7.8GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attacker...
CVE-2026-2044HIGH8.8GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attacke...
CVE-2026-2043HIGH8.8Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerabili...
CVE-2026-2042HIGH8.8Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote att...
CVE-2026-2041HIGH8.8Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allo...
CVE-2026-2040HIGH7.3PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnera...
CVE-2026-2039CRITICAL9.8GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote atta...
CVE-2026-2038CRITICAL9.8GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attac...
CVE-2026-2037HIGH8.8GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows ...
CVE-2026-2036HIGH8.8GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows...
CVE-2026-2035MEDIUM6.8Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability. This vulnerability allow...
CVE-2026-2034HIGH7.8Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows r...
CVE-2026-2033HIGH8.1MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allo...
CVE-2026-27133MEDIUM5.9Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. F...
CVE-2026-27125MEDIUM6.8svelte performance oriented web framework. Prior to 5.51.5, in server-side rendering, attribute spreading on elements (e...
CVE-2026-27122MEDIUM5.4svelte performance oriented web framework. Prior to 5.51.5, when using <svelte:element this={tag}> in server-side render...
CVE-2026-27121MEDIUM5.4svelte performance oriented web framework. Versions of svelte prior to 5.51.5 are vulnerable to cross-site scripting (XS...
CVE-2026-27119MEDIUM5.4svelte performance oriented web framework. From 5.39.3, <=5.51.4, in certain circumstances, the server-side rendering ou...
CVE-2026-2858HIGH7.1A vulnerability was identified in wren-lang wren up to 0.4.0. This affects the function peekChar of the file src/vm/wren...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now