2026 CVE Vulnerabilities
83,481 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27120 | MEDIUM | 6.1 | 0.2% | Feb 20, 2026 | Leafkit is a templating language with Swift-inspired syntax. Prior to 1.4.1, htmlEscaped in leaf-kit will only escape ht... |
| CVE-2026-27118 | MEDIUM | 5.3 | 0.3% | Feb 20, 2026 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Versions of @sveltejs/... |
| CVE-2026-27113 | MEDIUM | 6.3 | 0.4% | Feb 20, 2026 | Liquid Prompt is an adaptive prompt for Bash and Zsh. Starting in commit cf3441250bb5d8b45f6f8b389fcdf427a99ac28a and pr... |
| CVE-2026-27112 | CRITICAL | 9.9 | 0.4% | Feb 20, 2026 | Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the b... |
| CVE-2026-27111 | MEDIUM | 5 | 0.2% | Feb 20, 2026 | Kargo manages and automates the promotion of software artifacts. From v1.9.0 to v1.9.2, Kargo's authorization model incl... |
| CVE-2026-27026 | MEDIUM | 5.5 | 0.2% | Feb 20, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can cra... |
| CVE-2026-27025 | MEDIUM | 5.5 | 0.2% | Feb 20, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can cra... |
| CVE-2026-27024 | MEDIUM | 5.5 | 0.2% | Feb 20, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can cra... |
| CVE-2026-27022 | MEDIUM | 6.5 | 3.7% | Feb 20, 2026 | @langchain/langgraph-checkpoint-redis is the Redis checkpoint and store implementation for LangGraph. A query injection ... |
| CVE-2026-0797 | HIGH | 8.8 | 1.2% | Feb 20, 2026 | GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a... |
| CVE-2026-0777 | HIGH | 7.8 | 0.3% | Feb 20, 2026 | Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers... |
| CVE-2026-2857 | HIGH | 8.8 | 0.9% | Feb 20, 2026 | A vulnerability was determined in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_423E00 of the file... |
| CVE-2026-2856 | HIGH | 8.8 | 0.6% | Feb 20, 2026 | A vulnerability was found in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_424AFC of the f... |
| CVE-2026-27190 | CRITICAL | 9.8 | 2.2% | Feb 20, 2026 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.6.8, a command injection vulnerability exists in D... |
| CVE-2026-27020 | MEDIUM | 5.3 | 0.3% | Feb 20, 2026 | Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields. Malicious users could inj... |
| CVE-2026-25896 | CRITICAL | 9.3 | 0.5% | Feb 20, 2026 | fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based li... |
| CVE-2026-24892 | HIGH | 8.8 | 0.8% | Feb 20, 2026 | openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheu... |
| CVE-2026-2855 | HIGH | 8.8 | 0.6% | Feb 20, 2026 | A vulnerability has been found in D-Link DWR-M960 1.01.07. Affected is the function sub_4648F0 of the file /boafrm/formD... |
| CVE-2026-2854 | HIGH | 8.8 | 0.6% | Feb 20, 2026 | A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub_4611CC of the file /boafrm/formNtp of th... |
| CVE-2026-2853 | HIGH | 8.8 | 0.9% | Feb 20, 2026 | A vulnerability was detected in D-Link DWR-M960 1.01.07. This affects the function sub_462E14 of the file /boafrm/formSy... |
| CVE-2026-2473 | HIGH | 7.7 | 0.4% | Feb 20, 2026 | Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not includin... |
| CVE-2026-2472 | HIGH | 8.6 | 0.5% | Feb 20, 2026 | Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-clo... |
| CVE-2026-2852 | MEDIUM | 6.3 | 0.2% | Feb 20, 2026 | A vulnerability was identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects th... |
| CVE-2026-2851 | MEDIUM | 5.3 | 0.2% | Feb 20, 2026 | A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This vulnerability af... |
| CVE-2026-2850 | MEDIUM | 6.5 | 0.2% | Feb 20, 2026 | A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now