2026 CVE Vulnerabilities
83,485 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26960 | HIGH | 7.1 | 0.3% | Feb 20, 2026 | node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-control... |
| CVE-2026-26065 | HIGH | 8.8 | 0.5% | Feb 20, 2026 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and ... |
| CVE-2026-26064 | HIGH | 8.8 | 0.9% | Feb 20, 2026 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and ... |
| CVE-2026-26975 | HIGH | 8.8 | 1.4% | Feb 20, 2026 | Music Assistant is an open-source media library manager that integrates streaming services with connected speakers. Vers... |
| CVE-2026-26974 | CRITICAL | 9.8 | 0.5% | Feb 20, 2026 | Slyde is a program that creates animated presentations from XML. In versions 0.0.4 and below, Node.js automatically impo... |
| CVE-2026-26967 | MEDIUM | 5.3 | 0.3% | Feb 20, 2026 | PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a cr... |
| CVE-2026-2605 | MEDIUM | 5.3 | 0.3% | Feb 20, 2026 | Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS. |
| CVE-2026-2435 | HIGH | 8.8 | 0.2% | Feb 20, 2026 | Tanium addressed a SQL injection vulnerability in Asset. |
| CVE-2026-2408 | MEDIUM | 4.7 | 0.1% | Feb 20, 2026 | Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension. |
| CVE-2026-2350 | MEDIUM | 6.5 | 0.3% | Feb 20, 2026 | Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS. |
| CVE-2026-27009 | MEDIUM | 5.8 | 0.2% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a atored XSS issue in the OpenClaw Control UI when rend... |
| CVE-2026-27008 | MEDIUM | 6.7 | 0.2% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in `download` skill installation allowed `targetD... |
| CVE-2026-27007 | LOW | 3.3 | 0.2% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, `normalizeForHash` in `src/agents/sandbox/config-hash.t... |
| CVE-2026-27004 | MEDIUM | 5.5 | 0.1% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, in some shared-agent deployments, OpenClaw session tool... |
| CVE-2026-27003 | MEDIUM | 5.5 | 0.1% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Telegram bot tokens can appear in error messages and stack traces (for example, whe... |
| CVE-2026-27002 | CRITICAL | 9.8 | 0.5% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sand... |
| CVE-2026-27001 | HIGH | 7.8 | 0.2% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.15, OpenClaw embedded the current working directory (worksp... |
| CVE-2026-26972 | MEDIUM | 6.7 | 0.2% | Feb 20, 2026 | OpenClaw is a personal AI assistant. In versions 2026.1.12 through 2026.2.12, OpenClaw browser download helpers accepted... |
| CVE-2026-26964 | LOW | 2.7 | 0.3% | Feb 20, 2026 | Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Versions 1.63... |
| CVE-2026-26963 | MEDIUM | 5.4 | 0.1% | Feb 20, 2026 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.... |
| CVE-2026-26959 | HIGH | 7.8 | 0.2% | Feb 20, 2026 | ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below fail to validate the integrity or authentic... |
| CVE-2026-26957 | — | — | — | Feb 20, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: Upon further research, the mai... |
| CVE-2026-26329 | MEDIUM | 6.5 | 0.4% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, authenticated attackers can read arbitrary files from t... |
| CVE-2026-26328 | MEDIUM | 6.5 | 0.3% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, under iMessage `groupPolicy=allowlist`, group authoriza... |
| CVE-2026-1292 | MEDIUM | 6.5 | 0.3% | Feb 20, 2026 | Tanium addressed an insertion of sensitive information into log file vulnerability in Trends. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now