2026 CVE Vulnerabilities
83,493 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23616 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Anti-Spoofing co... |
| CVE-2026-23615 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Sender Policy Fr... |
| CVE-2026-23614 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Sender Policy Fr... |
| CVE-2026-23613 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the URI DNS Blocklis... |
| CVE-2026-23612 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the IP DNS Blocklist... |
| CVE-2026-23611 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the IP Blocklist man... |
| CVE-2026-23610 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the POP2Exchange con... |
| CVE-2026-23609 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Perimeter SMTP S... |
| CVE-2026-23608 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Mail Monitoring ... |
| CVE-2026-23607 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Anti-Spam Whitel... |
| CVE-2026-23606 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Advanced Content... |
| CVE-2026-23605 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Attachment Filte... |
| CVE-2026-23604 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Keyword Filterin... |
| CVE-2026-2232 | HIGH | 7.5 | 0.3% | Feb 19, 2026 | The Product Table and List Builder for WooCommerce Lite plugin for WordPress is vulnerable to time-based SQL Injection v... |
| CVE-2026-26336 | HIGH | 8.7 | 0.3% | Feb 19, 2026 | Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via t... |
| CVE-2026-26030 | CRITICAL | 9.9 | 2.9% | Feb 19, 2026 | Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to ... |
| CVE-2026-26016 | HIGH | 8.1 | 0.3% | Feb 19, 2026 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.... |
| CVE-2026-25998 | HIGH | 7.5 | 0.3% | Feb 19, 2026 | strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the datab... |
| CVE-2026-24834 | HIGH | 8.8 | 0.2% | Feb 19, 2026 | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) th... |
| CVE-2026-1581 | HIGH | 7.5 | 1.7% | Feb 19, 2026 | The wpForo Forum plugin for WordPress is vulnerable to time-based SQL Injection via the 'wpfob' parameter in all version... |
| CVE-2026-2274 | HIGH | 8.5 | 0.3% | Feb 19, 2026 | A SSRF and Arbitrary File Read vulnerability in AppSheet Core in Google AppSheet prior to 2025-11-23 allows an authentic... |
| CVE-2026-26345 | HIGH | 8.6 | 0.2% | Feb 19, 2026 | SPIP before 4.4.8 contains a stored cross-site scripting (XSS) vulnerability in the public area triggered in certain edg... |
| CVE-2026-26223 | MEDIUM | 6.1 | 0.2% | Feb 19, 2026 | SPIP before 4.4.8 allows cross-site scripting (XSS) in the private area via malicious iframe tags. The application does ... |
| CVE-2026-25940 | HIGH | 8.1 | 0.4% | Feb 19, 2026 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of properties and methods of the Acrofor... |
| CVE-2026-25766 | MEDIUM | 5.3 | 0.3% | Feb 19, 2026 | Echo is a Go web framework. In versions 5.0.0 through 5.0.2 on Windows, Echo’s `middleware.Static` using the default fil... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now