2026 CVE Vulnerabilities
83,544 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24734 | HIGH | 7.5 | 0.5% | Feb 17, 2026 | Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Na... |
| CVE-2026-24733 | LOW | 3.7 | 0.5% | Feb 17, 2026 | Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If... |
| CVE-2026-1452 | — | — | — | Feb 17, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-2618 | HIGH | 7.4 | 0.3% | Feb 17, 2026 | A vulnerability was determined in Beetel 777VR1 up to 01.00.09. This impacts an unknown function of the component SSH Se... |
| CVE-2026-23648 | HIGH | 8.5 | 0.1% | Feb 17, 2026 | Glory RBG-100 recycler systems using the ISPK-08 software component contain multiple system binaries with overly permiss... |
| CVE-2026-23647 | CRITICAL | 9.8 | 0.6% | Feb 17, 2026 | Glory RBG-100 recycler systems using the ISPK-08 software component contain hard-coded operating system credentials that... |
| CVE-2026-2617 | HIGH | 8.8 | 0.6% | Feb 17, 2026 | A vulnerability was found in Beetel 777VR1 up to 01.00.09. This affects an unknown function of the component Telnet Serv... |
| CVE-2026-2616 | CRITICAL | 9.8 | 1.3% | Feb 17, 2026 | A vulnerability has been found in Beetel 777VR1 up to 01.00.09. The impacted element is an unknown function of the compo... |
| CVE-2026-22208 | CRITICAL | 9.6 | 0.9% | Feb 17, 2026 | OpenS100 (the reference implementation S-100 viewer) prior to commit 753cf29 contains a remote code execution vulnerabil... |
| CVE-2026-25087 | HIGH | 7 | 0.8% | Feb 17, 2026 | Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It ca... |
| CVE-2026-23861 | MEDIUM | 5.4 | 0.2% | Feb 17, 2026 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Gen... |
| CVE-2026-2615 | HIGH | 7.3 | 10.3% | Feb 17, 2026 | A flaw has been found in Wavlink WL-NU516U1 up to 20251208. The affected element is the function singlePortForwardDelete... |
| CVE-2026-2608 | MEDIUM | 4.3 | 0.2% | Feb 17, 2026 | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access... |
| CVE-2026-2247 | HIGH | 8.3 | 0.2% | Feb 17, 2026 | SQL injection vulnerability (SQLi) in Clicldeu SaaS, specifically in the generation of reports, which occurs when a prev... |
| CVE-2026-25903 | MEDIUM | 6.6 | 0.8% | Feb 17, 2026 | Apache NiFi 1.1.0 through 2.7.2 are missing authorization when updating configuration properties on extension components... |
| CVE-2026-1216 | HIGH | 7.2 | 0.2% | Feb 17, 2026 | The RSS Aggregator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'template' parameter in ... |
| CVE-2026-0829 | MEDIUM | 5.8 | 0.7% | Feb 17, 2026 | The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the s... |
| CVE-2026-1657 | MEDIUM | 5.3 | 0.4% | Feb 17, 2026 | The EventPrime plugin for WordPress is vulnerable to unauthorized image file upload in all versions up to, and including... |
| CVE-2026-2592 | HIGH | 7.7 | 0.3% | Feb 17, 2026 | The Zarinpal Gateway for WooCommerce plugin for WordPress is vulnerable to Improper Access Control to Payment Status Upd... |
| CVE-2026-2002 | MEDIUM | 4.4 | 0.2% | Feb 17, 2026 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cro... |
| CVE-2026-26220 | CRITICAL | 9.3 | 0.7% | Feb 17, 2026 | LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution vulnerability in PD (prefill-decode) d... |
| CVE-2026-2439 | CRITICAL | 9.8 | 0.4% | Feb 16, 2026 | Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids. The generate_session_id fun... |
| CVE-2026-2474 | HIGH | 7.5 | 0.3% | Feb 16, 2026 | Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_... |
| CVE-2026-2001 | HIGH | 8.8 | 0.4% | Feb 16, 2026 | The WowRevenue plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check ... |
| CVE-2026-2567 | HIGH | 7.3 | 0.7% | Feb 16, 2026 | A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub_401218 of the f... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now