2026 CVE Vulnerabilities
83,544 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23599 | HIGH | 7.8 | 0.1% | Feb 18, 2026 | A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software fo... |
| CVE-2026-22048 | HIGH | 7.1 | 0.3% | Feb 18, 2026 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single Sign-on enabled and con... |
| CVE-2026-1344 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | Tanium addressed an insecure file permissions vulnerability in Enforce Recovery Key Portal. |
| CVE-2026-2570 | — | — | — | Feb 17, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-26119 | HIGH | 8.8 | 0.8% | Feb 17, 2026 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-1670 | CRITICAL | 9.8 | 0.8% | Feb 17, 2026 | The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotel... |
| CVE-2026-2629 | HIGH | 7.3 | 1.7% | Feb 17, 2026 | A weakness has been identified in jishi node-sonos-http-api up to 3776f0ee2261c924c7b7204de121a38100a08ca7. Affected is ... |
| CVE-2026-2627 | HIGH | 7.8 | 0.2% | Feb 17, 2026 | A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\Pr... |
| CVE-2026-2623 | HIGH | 8.8 | 0.6% | Feb 17, 2026 | A flaw has been found in Blossom up to 1.17.1. This issue affects the function put of the file blossom-backend/common/co... |
| CVE-2026-2622 | MEDIUM | 5.4 | 0.3% | Feb 17, 2026 | A vulnerability was detected in Blossom up to 1.17.1. This vulnerability affects the function content of the file blosso... |
| CVE-2026-2621 | HIGH | 7.3 | 0.3% | Feb 17, 2026 | A security vulnerability has been detected in Sciyon Koyuan Thermoelectricity Heat Network Management System 3.0. This a... |
| CVE-2026-23598 | MEDIUM | 6.5 | 0.3% | Feb 17, 2026 | Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated ... |
| CVE-2026-23597 | MEDIUM | 6.5 | 0.2% | Feb 17, 2026 | Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated ... |
| CVE-2026-23596 | MEDIUM | 6.5 | 0.2% | Feb 17, 2026 | A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger ... |
| CVE-2026-23595 | HIGH | 8.8 | 0.3% | Feb 17, 2026 | An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote at... |
| CVE-2026-2620 | HIGH | 7.3 | 0.3% | Feb 17, 2026 | A weakness has been identified in Huace Monitoring and Early Warning System 2.2. Affected by this issue is some unknown ... |
| CVE-2026-26357 | MEDIUM | 5.4 | 0.2% | Feb 17, 2026 | Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generati... |
| CVE-2026-22769 | CRITICAL | 10 | 13.1% | Feb 17, 2026 | Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. Thi... |
| CVE-2026-22762 | MEDIUM | 6.5 | 0.3% | Feb 17, 2026 | Dell Avamar Server and Avamar Virtual Edition, versions prior to 19.10 SP1 with CHF338912, contain an Improper Limitatio... |
| CVE-2026-22284 | HIGH | 7.2 | 0.9% | Feb 17, 2026 | Dell SmartFabric OS10 Software, versions prior to 10.5.6.12, contains an Improper Neutralization of Special Elements use... |
| CVE-2026-0102 | LOW | 3.1 | 0.5% | Feb 17, 2026 | Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially w... |
| CVE-2026-2630 | HIGH | 8.8 | 1.2% | Feb 17, 2026 | A Command Injection vulnerability exists where an authenticated, remote attacker could execute arbitrary code on the und... |
| CVE-2026-26736 | HIGH | 8.8 | 0.5% | Feb 17, 2026 | TOTOLINK A3002RU_V3 V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the static_ipv6 pa... |
| CVE-2026-26732 | HIGH | 8.8 | 0.3% | Feb 17, 2026 | TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the vpnUser or vpnPas... |
| CVE-2026-26731 | HIGH | 8.8 | 0.5% | Feb 17, 2026 | TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`param... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now