2026 CVE Vulnerabilities
83,525 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-27182 | HIGH | 8.6 | 1.2% | Feb 18, 2026 | Saturn Remote Mouse Server contains a command injection vulnerability that allows unauthenticated attackers to execute a... |
| CVE-2026-27181 | HIGH | 8.7 | 0.7% | Feb 18, 2026 | MajorDoMo (aka Major Domestic Module) allows unauthenticated arbitrary module uninstallation through the market module. ... |
| CVE-2026-27180 | CRITICAL | 9.8 | 1.1% | Feb 18, 2026 | MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated remote code execution through supply chain compro... |
| CVE-2026-27179 | CRITICAL | 9.8 | 0.5% | Feb 18, 2026 | MajorDoMo (aka Major Domestic Module) contains an unauthenticated SQL injection vulnerability in the commands module. Th... |
| CVE-2026-27178 | MEDIUM | 6.1 | 0.2% | Feb 18, 2026 | MajorDoMo (aka Major Domestic Module) contains a stored cross-site scripting (XSS) vulnerability through method paramete... |
| CVE-2026-27177 | MEDIUM | 6.1 | 0.2% | Feb 18, 2026 | MajorDoMo (aka Major Domestic Module) contains a stored cross-site scripting (XSS) vulnerability via the /objects/?op=se... |
| CVE-2026-27176 | MEDIUM | 6.1 | 0.4% | Feb 18, 2026 | MajorDoMo (aka Major Domestic Module) contains a reflected cross-site scripting (XSS) vulnerability in command.php. The ... |
| CVE-2026-27175 | CRITICAL | 9.8 | 6.9% | Feb 18, 2026 | MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated OS command injection via rc/index.php. The $param... |
| CVE-2026-27174 | CRITICAL | 9.8 | 7.0% | Feb 18, 2026 | MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the admin panel's PHP console fea... |
| CVE-2026-24744 | HIGH | 7.5 | 0.2% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site ... |
| CVE-2026-24743 | HIGH | 7.5 | 0.2% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site ... |
| CVE-2026-2668 | HIGH | 7.3 | 0.5% | Feb 18, 2026 | A vulnerability was found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This affects an... |
| CVE-2026-2667 | MEDIUM | 5.5 | 0.6% | Feb 18, 2026 | A vulnerability has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. The impact... |
| CVE-2026-24746 | HIGH | 7.5 | 0.3% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site ... |
| CVE-2026-1999 | MEDIUM | 6.5 | 0.2% | Feb 18, 2026 | An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to merge th... |
| CVE-2026-1355 | MEDIUM | 6.5 | 0.4% | Feb 18, 2026 | A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload unau... |
| CVE-2026-1200 | MEDIUM | 6.3 | 0.3% | Feb 18, 2026 | A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `... |
| CVE-2026-0665 | MEDIUM | 6.5 | 0.1% | Feb 18, 2026 | An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-b... |
| CVE-2026-0573 | CRITICAL | 9 | 0.6% | Feb 18, 2026 | An URL redirection vulnerability was identified in GitHub Enterprise Server that allowed attacker-controlled redirects t... |
| CVE-2026-2666 | HIGH | 7.2 | 0.4% | Feb 18, 2026 | A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTem... |
| CVE-2026-2665 | MEDIUM | 6.3 | 0.3% | Feb 18, 2026 | A vulnerability was detected in huanzi-qch base-admin up to 57a8126bb3353a004f3c7722089e3b926ea83596. Impacted is the fu... |
| CVE-2026-2663 | MEDIUM | 6.3 | 0.2% | Feb 18, 2026 | A security vulnerability has been detected in Alixhan xh-admin-backend up to 1.7.0. This issue affects some unknown proc... |
| CVE-2026-2662 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the function count_transforms... |
| CVE-2026-2661 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the librar... |
| CVE-2026-25500 | MEDIUM | 5.4 | 0.2% | Feb 18, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory` generates an... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now