2026 CVE Vulnerabilities
83,541 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2641 | LOW | 3.3 | 0.2% | Feb 18, 2026 | A weakness has been identified in universal-ctags ctags up to 6.2.1. The affected element is the function parseExpressio... |
| CVE-2026-2023 | MEDIUM | 4.3 | 0.2% | Feb 18, 2026 | The WP Plugin Info Card plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl... |
| CVE-2026-1906 | MEDIUM | 4.3 | 0.3% | Feb 18, 2026 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference ... |
| CVE-2026-1639 | MEDIUM | 6.5 | 0.3% | Feb 18, 2026 | The Taskbuilder – WordPress Project Management & Task Management plugin for WordPress is vulnerable to time-based blind ... |
| CVE-2026-1368 | HIGH | 7.5 | 1.2% | Feb 18, 2026 | The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce verification ... |
| CVE-2026-1304 | MEDIUM | 4.4 | 0.3% | Feb 18, 2026 | The Membership Plugin – Restrict Content for WordPress is vulnerable to Stored Cross-Site Scripting via multiple invoice... |
| CVE-2026-1072 | MEDIUM | 4.3 | 0.2% | Feb 18, 2026 | The Keybase.io Verification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and ... |
| CVE-2026-2576 | HIGH | 7.5 | 0.4% | Feb 18, 2026 | The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based ... |
| CVE-2026-1931 | HIGH | 7.2 | 0.3% | Feb 18, 2026 | The Rent Fetch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'keyword' parameter in all vers... |
| CVE-2026-1925 | MEDIUM | 4.3 | 0.2% | Feb 18, 2026 | The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to unauthorized data modificatio... |
| CVE-2026-1714 | HIGH | 8.6 | 0.5% | Feb 18, 2026 | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution plugin for WordPress is... |
| CVE-2026-1296 | MEDIUM | 6.1 | 0.5% | Feb 18, 2026 | The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Open Redirection in all versions up to, ... |
| CVE-2026-1277 | MEDIUM | 4.7 | 0.6% | Feb 18, 2026 | The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to... |
| CVE-2026-27171 | MEDIUM | 5.5 | 0.2% | Feb 18, 2026 | zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts... |
| CVE-2026-27038 | — | — | — | Feb 18, 2026 | Rejected reason: Not used |
| CVE-2026-27037 | — | — | — | Feb 18, 2026 | Rejected reason: Not used |
| CVE-2026-27036 | — | — | — | Feb 18, 2026 | Rejected reason: Not used |
| CVE-2026-27035 | — | — | — | Feb 18, 2026 | Rejected reason: Not used |
| CVE-2026-27034 | — | — | — | Feb 18, 2026 | Rejected reason: Not used |
| CVE-2026-27033 | — | — | — | Feb 18, 2026 | Rejected reason: Not used |
| CVE-2026-27032 | — | — | — | Feb 18, 2026 | Rejected reason: Not used |
| CVE-2026-27031 | — | — | — | Feb 18, 2026 | Rejected reason: Not used |
| CVE-2026-23599 | HIGH | 7.8 | 0.1% | Feb 18, 2026 | A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software fo... |
| CVE-2026-22048 | HIGH | 7.1 | 0.3% | Feb 18, 2026 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and con... |
| CVE-2026-1344 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | Tanium addressed an insecure file permissions vulnerability in Enforce Recovery Key Portal. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now