2026 CVE Vulnerabilities
83,528 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2662 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the function count_transforms... |
| CVE-2026-2661 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the librar... |
| CVE-2026-25500 | MEDIUM | 5.4 | 0.2% | Feb 18, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory` generates an... |
| CVE-2026-23491 | HIGH | 7.5 | 1.1% | Feb 18, 2026 | InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A path traversal vul... |
| CVE-2026-0875 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulner... |
| CVE-2026-0874 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vuln... |
| CVE-2026-2660 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | A vulnerability was identified in FascinatedBox lily up to 2.3. Affected by this issue is the function shorthash_for_nam... |
| CVE-2026-22860 | HIGH | 7.5 | 0.7% | Feb 18, 2026 | Rack is a modular Ruby web server interface. Prior to versions 2.2.22, 3.1.20, and 3.2.5, `Rack::Directory`’s path check... |
| CVE-2026-2659 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | A vulnerability was determined in Squirrel up to 3.2. Affected by this vulnerability is the function SQFuncState::PopTar... |
| CVE-2026-2658 | MEDIUM | 4.3 | 0.3% | Feb 18, 2026 | A vulnerability was found in newbee-ltd newbee-mall up to a069069b07027613bf0e7f571736be86f431faee. Affected is an unkno... |
| CVE-2026-24708 | HIGH | 8.2 | 0.3% | Feb 18, 2026 | An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious ... |
| CVE-2026-20144 | MEDIUM | 4.9 | 0.4% | Feb 18, 2026 | In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 1... |
| CVE-2026-20142 | MEDIUM | 4.9 | 0.3% | Feb 18, 2026 | In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Search Head Cluster (SH... |
| CVE-2026-20141 | MEDIUM | 6.5 | 0.2% | Feb 18, 2026 | In Splunk Enterprise versions below 10.0.2, 10.0.3, 9.4.8, and 9.3.9, a low-privileged user who does not hold the "admin... |
| CVE-2026-20139 | MEDIUM | 4.3 | 5.1% | Feb 18, 2026 | In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.8, 9.3.9, and 9.2.12, and Splunk Cloud Platform versions below 1... |
| CVE-2026-20138 | MEDIUM | 4.9 | 0.3% | Feb 18, 2026 | In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Search Head Cluster (SH... |
| CVE-2026-20137 | MEDIUM | 5.7 | 0.2% | Feb 18, 2026 | In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.5, 9.3.7, and 9.2.9, and Splunk Cloud Platform versions below 10... |
| CVE-2026-2657 | MEDIUM | 5.5 | 0.3% | Feb 18, 2026 | A vulnerability has been found in wren-lang wren up to 0.4.0. This impacts the function printError of the file src/vm/wr... |
| CVE-2026-2507 | HIGH | 8.7 | 0.3% | Feb 18, 2026 | When BIG-IP AFM or BIG-IP DDoS is provisioned, undisclosed traffic can cause TMM to terminate. Note: Software versions ... |
| CVE-2026-2230 | MEDIUM | 4.3 | 0.2% | Feb 18, 2026 | The Booking Calendar plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and i... |
| CVE-2026-23230 | MEDIUM | 5.5 | 0.3% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: smb: client: split cached_fid bitfields to avoid sh... |
| CVE-2026-23229 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtq... |
| CVE-2026-23228 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in ksmbd_t... |
| CVE-2026-23227 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use ctx->lock to protect struct v... |
| CVE-2026-23226 | HIGH | 7.8 | 0.5% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: add chann_lock to protect ksmbd_chann_list x... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now