2026 CVE Vulnerabilities

83,518 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-23544HIGH8.8Deserialization of Untrusted Data vulnerability in codetipi Valenti valenti allows Object Injection.This issue affects V...
CVE-2026-23543MEDIUM5.3Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite al...
CVE-2026-23542CRITICAL9.8Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.T...
CVE-2026-23541HIGH7.5Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constra...
CVE-2026-22422MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in wpeverest Everest Forms e...
CVE-2026-22333HIGH7.2Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Obj...
CVE-2026-22269MEDIUM4.7Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communicat...
CVE-2026-2733LOW3.8A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even afte...
CVE-2026-2711MEDIUM5.6A vulnerability has been found in zhutoutoutousan worldquant-miner up to 1.0.9. The impacted element is an unknown funct...
CVE-2026-2731CRITICAL10Path traversal and content injection in JobRunnerBackground.aspx in DynamicWeb 8 (all) and 9 (<9.19.7 and <9.20.3) allow...
CVE-2026-2709LOW3.5A flaw has been found in busy up to 2.5.5. The affected element is an unknown function of the file source-code/busy-mast...
CVE-2026-2706HIGH7.5A flaw has been found in code-projects Patient Record Management System 1.0. This affects an unknown function of the fil...
CVE-2026-2705HIGH8.1A vulnerability was detected in Open Babel up to 3.1.1. The impacted element is the function OBAtom::SetFormalCharge in ...
CVE-2026-2704HIGH8.1A security vulnerability has been detected in Open Babel up to 3.1.1. The affected element is the function OpenBabel::tr...
CVE-2026-2703MEDIUM5.5A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::decode_base64 ...
CVE-2026-2702LOW3.1A security flaw has been discovered in Beetel 777VR1 up to 01.00.09. This issue affects some unknown processing of the c...
CVE-2026-2693MEDIUM6.5A vulnerability was determined in CoCoTeaNet CyreneAdmin up to 1.3.0. This vulnerability affects unknown code of the fil...
CVE-2026-2692MEDIUM6.5A vulnerability was found in CoCoTeaNet CyreneAdmin up to 1.3.0. This affects an unknown part of the file /api/system/us...
CVE-2026-2691CRITICAL9.8A vulnerability has been found in itsourcecode Event Management System 1.0. Affected by this issue is some unknown funct...
CVE-2026-2690CRITICAL9.8A flaw has been found in itsourcecode Event Management System 1.0. Affected by this vulnerability is an unknown function...
CVE-2026-2689CRITICAL9.8A vulnerability was detected in itsourcecode Event Management System 1.0. Affected is an unknown function of the file /a...
CVE-2026-2681MEDIUM5.3A flaw was found in the blst cryptographic library. This out-of-bounds stack write vulnerability, specifically in the bl...
CVE-2026-2504MEDIUM4.3The Dealia – Request a quote plugin for WordPress is vulnerable to unauthorized modification of data due to missing capa...
CVE-2026-2502MEDIUM6.1The xmlrpc attacks blocker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and incl...
CVE-2026-2284MEDIUM5.4The News Element Elementor Blog Magazine plugin for WordPress is vulnerable to Missing Authorization in all versions up ...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now