2026 CVE Vulnerabilities
83,535 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23211 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm, swap: restore swap_space attr aviod kernel pani... |
| CVE-2026-1426 | HIGH | 8.8 | 0.5% | Feb 18, 2026 | The Advanced AJAX Product Filters plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and ... |
| CVE-2026-1404 | MEDIUM | 6.1 | 0.2% | Feb 18, 2026 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi... |
| CVE-2026-2655 | LOW | 2.5 | 0.2% | Feb 18, 2026 | A vulnerability was detected in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::str_less::opera... |
| CVE-2026-2654 | CRITICAL | 9.8 | 0.4% | Feb 18, 2026 | A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of ... |
| CVE-2026-2464 | HIGH | 8.7 | 0.6% | Feb 18, 2026 | Path traversal vulnerability in the AMR Printer Management 1.01 Beta web service, which allows remote attackers to read ... |
| CVE-2026-1441 | MEDIUM | 6.1 | 0.2% | Feb 18, 2026 | Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack... |
| CVE-2026-1440 | MEDIUM | 6.1 | 0.2% | Feb 18, 2026 | Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack... |
| CVE-2026-1439 | MEDIUM | 6.1 | 0.2% | Feb 18, 2026 | Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack... |
| CVE-2026-1438 | MEDIUM | 6.1 | 0.2% | Feb 18, 2026 | Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack... |
| CVE-2026-1437 | MEDIUM | 6.1 | 0.2% | Feb 18, 2026 | Reflected Cross-Site Scripting (XSS) vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack... |
| CVE-2026-1436 | MEDIUM | 6.5 | 0.2% | Feb 18, 2026 | Improper Access Control (IDOR) in the Graylog API, version 2.2.3, which occurs when modifying the user ID in the URL. An... |
| CVE-2026-1435 | CRITICAL | 9.8 | 0.4% | Feb 18, 2026 | Not properly invalidated session vulnerability in Graylog Web Interface, version 2.2.3, due to incorrect management of s... |
| CVE-2026-2386 | MEDIUM | 4.3 | 0.2% | Feb 18, 2026 | The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for Wor... |
| CVE-2026-1582 | LOW | 3.7 | 0.3% | Feb 18, 2026 | The WP All Export plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ... |
| CVE-2026-1317 | MEDIUM | 6.5 | 0.2% | Feb 18, 2026 | The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to SQL Injection in all versi... |
| CVE-2026-2653 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of t... |
| CVE-2026-2426 | MEDIUM | 6.5 | 1.3% | Feb 18, 2026 | The WP-DownloadManager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.69 v... |
| CVE-2026-1942 | MEDIUM | 6.5 | 0.3% | Feb 18, 2026 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized modification of d... |
| CVE-2026-2126 | MEDIUM | 5.3 | 0.3% | Feb 18, 2026 | The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Incorre... |
| CVE-2026-2495 | HIGH | 7.5 | 0.4% | Feb 18, 2026 | The WPNakama – Team and multi-Client Collaboration, Editorial and Project Management plugin for WordPress is vulnerable ... |
| CVE-2026-2127 | MEDIUM | 5.4 | 0.3% | Feb 18, 2026 | The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to unauthorized arbitrary shortcode execution in all ve... |
| CVE-2026-1941 | MEDIUM | 6.4 | 0.3% | Feb 18, 2026 | The WP Event Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_events' s... |
| CVE-2026-1656 | MEDIUM | 5.3 | 0.3% | Feb 18, 2026 | The Business Directory Plugin for WordPress is vulnerable to authorization bypass due to a missing authorization check i... |
| CVE-2026-1649 | MEDIUM | 4.4 | 0.2% | Feb 18, 2026 | The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ce_venue_name' parameter... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now