2026 CVE Vulnerabilities
83,522 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-0556 | MEDIUM | 6.4 | 0.3% | Feb 19, 2026 | The XO Event Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xo_event_field... |
| CVE-2026-0549 | MEDIUM | 6.4 | 0.3% | Feb 19, 2026 | The Groups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'groups_group_info' shortc... |
| CVE-2026-2686 | CRITICAL | 9.8 | 2.3% | Feb 19, 2026 | A security vulnerability has been detected in SECCN Dingcheng G10 3.1.0.181203. This impacts the function qq of the file... |
| CVE-2026-2684 | CRITICAL | 9.8 | 0.5% | Feb 19, 2026 | A vulnerability was determined in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). The impacted ele... |
| CVE-2026-25926 | HIGH | 7.3 | 0.2% | Feb 19, 2026 | Notepad++ is a free and open-source source code editor. An Unsafe Search Path vulnerability (CWE-426) exists in versions... |
| CVE-2026-24126 | CRITICAL | 9.1 | 0.4% | Feb 19, 2026 | Weblate is a web based localization tool. Prior to 5.16.0, the SSH management console did not validate the passed input ... |
| CVE-2026-2683 | MEDIUM | 4.3 | 0.5% | Feb 18, 2026 | A vulnerability was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). The affected element is an ... |
| CVE-2026-2682 | CRITICAL | 9.8 | 0.3% | Feb 18, 2026 | A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). Impacted is an u... |
| CVE-2026-2676 | MEDIUM | 6.3 | 0.3% | Feb 18, 2026 | A weakness has been identified in GoogTech sms-ssm up to e8534c766fd13f5f94c01dab475d75f286918a8d. Affected by this issu... |
| CVE-2026-26281 | MEDIUM | 4.4 | 0.2% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A stored cross-site ... |
| CVE-2026-26270 | MEDIUM | 5.4 | 0.2% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site ... |
| CVE-2026-25596 | MEDIUM | 4.8 | 0.2% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site ... |
| CVE-2026-25595 | MEDIUM | 4.8 | 0.2% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site ... |
| CVE-2026-25594 | MEDIUM | 4.8 | 0.2% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site ... |
| CVE-2026-25548 | CRITICAL | 9.1 | 0.8% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A critical Remote Co... |
| CVE-2026-24745 | HIGH | 7.5 | 0.2% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site ... |
| CVE-2026-2672 | MEDIUM | 5.3 | 0.6% | Feb 18, 2026 | A security flaw has been discovered in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this ... |
| CVE-2026-2670 | HIGH | 7.2 | 16.3% | Feb 18, 2026 | A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6... |
| CVE-2026-2669 | MEDIUM | 6.5 | 0.5% | Feb 18, 2026 | A vulnerability was determined in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This impac... |
| CVE-2026-2650 | HIGH | 8.8 | 0.5% | Feb 18, 2026 | Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit ... |
| CVE-2026-2649 | HIGH | 8.8 | 0.6% | Feb 18, 2026 | Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap co... |
| CVE-2026-2648 | HIGH | 8.8 | 0.5% | Feb 18, 2026 | Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of b... |
| CVE-2026-27182 | HIGH | 8.6 | 1.2% | Feb 18, 2026 | Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute a... |
| CVE-2026-27181 | HIGH | 8.7 | 0.7% | Feb 18, 2026 | MajorDoMo (aka Major Domestic Module) allows unauthenticated arbitrary module uninstallation through the market module. ... |
| CVE-2026-27180 | CRITICAL | 9.8 | 1.1% | Feb 18, 2026 | MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated remote code execution through supply chain compro... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now