2026 CVE Vulnerabilities
83,493 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25739 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Version... |
| CVE-2026-25738 | MEDIUM | 4.3 | 0.2% | Feb 19, 2026 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Version... |
| CVE-2026-25755 | HIGH | 8.8 | 0.8% | Feb 19, 2026 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of the `addJS` method al... |
| CVE-2026-25535 | HIGH | 7.5 | 0.7% | Feb 19, 2026 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the first argument of the `addImage` ... |
| CVE-2026-25527 | MEDIUM | 5.3 | 0.9% | Feb 19, 2026 | changedetection.io is a free open source web page change detection tool. In versions prior to 0.53.2, the `/static/<grou... |
| CVE-2026-2744 | — | — | — | Feb 19, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-2718 | MEDIUM | 6.4 | 0.2% | Feb 19, 2026 | The Dealia – Request a Quote plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Gutenberg block attri... |
| CVE-2026-2716 | MEDIUM | 4.4 | 0.2% | Feb 19, 2026 | The Client Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Testimonial Hea... |
| CVE-2026-22268 | MEDIUM | 6.5 | 0.2% | Feb 19, 2026 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A... |
| CVE-2026-22267 | HIGH | 8.8 | 0.4% | Feb 19, 2026 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignment vulnerability. A... |
| CVE-2026-22266 | HIGH | 8.8 | 0.3% | Feb 19, 2026 | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communicat... |
| CVE-2026-1461 | MEDIUM | 6.5 | 0.2% | Feb 19, 2026 | The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in all versions up to, a... |
| CVE-2026-1219 | MEDIUM | 5.3 | 0.2% | Feb 19, 2026 | The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Insecure Dir... |
| CVE-2026-2736 | MEDIUM | 6.1 | 0.1% | Feb 19, 2026 | Reflected Cross-site Scripting (XSS) in Alkacon's OpenCms v18.0, which allows an attacker to execute JavaScript code in ... |
| CVE-2026-2735 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | Stored Cross-Site Scripting (XSS) in Alkacon's OpenCms v18.0, which occurs when user input is not properly validated whe... |
| CVE-2026-27094 | MEDIUM | 6.5 | 0.1% | Feb 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoDaddy CoBlocks c... |
| CVE-2026-27092 | MEDIUM | 6.5 | 0.3% | Feb 19, 2026 | Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-27090 | MEDIUM | 4.3 | 0.1% | Feb 19, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in WP Moose Kenta Companion kenta-companion allows Cross Site Request Fo... |
| CVE-2026-27074 | MEDIUM | 6.5 | 0.1% | Feb 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vaakash Shortcoder... |
| CVE-2026-27069 | MEDIUM | 6.5 | 0.1% | Feb 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soleda... |
| CVE-2026-27066 | — | — | — | Feb 19, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-27059 | MEDIUM | 6.5 | 0.1% | Feb 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci ... |
| CVE-2026-27058 | MEDIUM | 6.5 | 0.1% | Feb 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci ... |
| CVE-2026-27057 | MEDIUM | 6.5 | 0.1% | Feb 19, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci ... |
| CVE-2026-27056 | MEDIUM | 4.3 | 0.2% | Feb 19, 2026 | Missing Authorization vulnerability in StellarWP iThemes Sync ithemes-sync allows Exploiting Incorrectly Configured Acce... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now