2026 CVE Vulnerabilities
83,491 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26963 | MEDIUM | 5.4 | 0.1% | Feb 20, 2026 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.18.0 through 1.18.... |
| CVE-2026-26959 | HIGH | 7.8 | 0.2% | Feb 20, 2026 | ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below fail to validate the integrity or authentic... |
| CVE-2026-26957 | — | — | — | Feb 20, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: Upon further research, the mai... |
| CVE-2026-26329 | MEDIUM | 6.5 | 0.4% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, authenticated attackers can read arbitrary files from t... |
| CVE-2026-26328 | MEDIUM | 6.5 | 0.3% | Feb 20, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, under iMessage `groupPolicy=allowlist`, group authoriza... |
| CVE-2026-1292 | MEDIUM | 6.5 | 0.3% | Feb 20, 2026 | Tanium addressed an insertion of sensitive information into log file vulnerability in Trends. |
| CVE-2026-26958 | LOW | 1.7 | 0.4% | Feb 19, 2026 | filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographi... |
| CVE-2026-26953 | MEDIUM | 5.4 | 0.3% | Feb 19, 2026 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking applic... |
| CVE-2026-26952 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking applic... |
| CVE-2026-26327 | MEDIUM | 6.5 | 0.1% | Feb 19, 2026 | OpenClaw is a personal AI assistant. Discovery beacons (Bonjour/mDNS and DNS-SD) include TXT records such as `lanHost`, ... |
| CVE-2026-26326 | MEDIUM | 4.3 | 0.3% | Feb 19, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, `skills.status` could disclose secrets to `operator.rea... |
| CVE-2026-26325 | HIGH | 7.2 | 0.5% | Feb 19, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, a mismatch between `rawCommand` and `command[]` in the ... |
| CVE-2026-26324 | HIGH | 7.5 | 0.4% | Feb 19, 2026 | OpenClaw is a personal AI assistant. Prior to version 2026.2.14, OpenClaw's SSRF protection could be bypassed using full... |
| CVE-2026-26323 | HIGH | 8.8 | 1.7% | Feb 19, 2026 | OpenClaw is a personal AI assistant. Versions 2026.1.8 through 2026.2.13 have a command injection in the maintainer/dev ... |
| CVE-2026-26322 | HIGH | 7.6 | 0.3% | Feb 19, 2026 | OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Gateway tool accepted a tool-supplied `gat... |
| CVE-2026-26321 | HIGH | 7.5 | 0.5% | Feb 19, 2026 | OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Feishu extension previously allowed `sendM... |
| CVE-2026-26320 | MEDIUM | 6.5 | 0.4% | Feb 19, 2026 | OpenClaw is a personal AI assistant. OpenClaw macOS desktop client registers the `openclaw://` URL scheme. For `openclaw... |
| CVE-2026-26319 | HIGH | 7.5 | 0.3% | Feb 19, 2026 | OpenClaw is a personal AI assistant. Versions 2026.2.13 and below allow the optional @openclaw/voice-call plugin Telnyx ... |
| CVE-2026-24122 | LOW | 3.7 | 0.2% | Feb 19, 2026 | Cosign provides code signing and transparency for containers and binaries. In versions 3.0.4 and below, an issuing certi... |
| CVE-2026-21535 | HIGH | 7.5 | 0.6% | Feb 19, 2026 | Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-1658 | MEDIUM | 5.3 | 0.2% | Feb 19, 2026 | User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache... |
| CVE-2026-26744 | MEDIUM | 5.3 | 0.3% | Feb 19, 2026 | A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible v... |
| CVE-2026-26317 | HIGH | 7.1 | 0.1% | Feb 19, 2026 | OpenClaw is a personal AI assistant. Prior to 2026.2.14, browser-facing localhost mutation routes accepted cross-origin ... |
| CVE-2026-26316 | HIGH | 7.5 | 0.3% | Feb 19, 2026 | OpenClaw is a personal AI assistant. Prior to 2026.2.13, the optional BlueBubbles iMessage channel plugin could accept w... |
| CVE-2026-26315 | HIGH | 7.5 | 0.4% | Feb 19, 2026 | go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, through... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now