2026 CVE Vulnerabilities

83,482 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-2850MEDIUM6.5A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function ...
CVE-2026-2832MEDIUM5.3Certain Samsung MultiXpress Multifunction Printers may be vulnerable to information disclosure, potentially exposing add...
CVE-2026-27115HIGH7.1ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below have an unvalidated command-line argument t...
CVE-2026-24891HIGH7.5openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheu...
CVE-2026-2849MEDIUM6.3A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issu...
CVE-2026-2848CRITICAL9.8A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unkn...
CVE-2026-2818HIGH8.2A zip-slip path traversal vulnerability in Spring Data Geode's import snapshot functionality allows attackers to write f...
CVE-2026-2333CRITICAL9.8Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command I...
CVE-2026-27506MEDIUM5.4SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow ...
CVE-2026-27505MEDIUM6.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (i...
CVE-2026-27504MEDIUM6.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the ...
CVE-2026-27503MEDIUM6.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search q...
CVE-2026-27502MEDIUM6.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query p...
CVE-2026-26747CRITICAL9.1A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Pro...
CVE-2026-26746HIGH8.8OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function. An atta...
CVE-2026-26745MEDIUM5.3OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currency_symbol configuration ...
CVE-2026-26725CRITICAL9.8An issue in edu Business Solutions Print Shop Pro WebDesk v.18.34 (fixed in 19.76) allows a remote attacker to escalate ...
CVE-2026-26724HIGH7.6Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote...
CVE-2026-26723HIGH8.2Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote...
CVE-2026-26722CRITICAL9.4An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privi...
CVE-2026-26721HIGH7.1An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensiti...
CVE-2026-26102HIGH7.8Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network...
CVE-2026-26101HIGH7.8Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network...
CVE-2026-26100MEDIUM5.5Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network...
CVE-2026-26099MEDIUM5.5Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via ...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now