2026 CVE Vulnerabilities

83,544 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-2415MEDIUM5.9Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name} is used...
CVE-2026-2577CRITICAL10The WhatsApp bridge component in Nanobot binds the WebSocket server to all network interfaces (0.0.0.0) on port 3001 by ...
CVE-2026-2550CRITICAL9.8A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file ...
CVE-2026-2549HIGH7.3A vulnerability has been found in zhanghuanhao LibrarySystem 图书馆管理系统 up to 1.1.1. This impacts an unknown function of th...
CVE-2026-0999MEDIUM4.3Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validate login method restri...
CVE-2026-0998MEDIUM4.3Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 ...
CVE-2026-0997MEDIUM4.3Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 ...
CVE-2026-2548MEDIUM6.3A flaw has been found in WAYOS FBM-220G 24.10.19. This affects the function sub_40F820 of the file rc. Executing a manip...
CVE-2026-2547MEDIUM6.1A vulnerability was detected in LigeroSmart up to 6.1.26. The impacted element is the function AgentDashboard of the fil...
CVE-2026-2546MEDIUM6.1A security vulnerability has been detected in LigeroSmart up to 6.1.26. The affected element is an unknown function of t...
CVE-2026-2545MEDIUM6.1A weakness has been identified in LigeroSmart up to 6.1.26. Impacted is an unknown function of the file /otrs/index.pl?A...
CVE-2026-2544HIGH7.3A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0. This issue affects the function child_process.exec o...
CVE-2026-2543MEDIUM5.1A vulnerability was identified in vichan-devel vichan up to 5.1.5. This vulnerability affects unknown code of the file i...
CVE-2026-2542HIGH7.3A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functional...
CVE-2026-2538HIGH7.3A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25. Affected is an unknown functi...
CVE-2026-0929MEDIUM4.3The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and ...
CVE-2026-2537HIGH7.2A vulnerability was identified in Comfast CF-E4 2.6.0.1. This impacts an unknown function of the file /cgi-bin/mbox-conf...
CVE-2026-2536MEDIUM6.3A vulnerability was determined in opencc JFlow up to 20260129. This affects the function Imp_Done of the file src/main/j...
CVE-2026-2535HIGH8.8A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. The impacted element is the function sub_44AB9C of the file /cgi-...
CVE-2026-2534HIGH8.8A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. The affected element is the function sub_44AC4C of the file ...
CVE-2026-2533HIGH7.3A flaw has been found in Tosei Self-service Washing Machine 4.02. Impacted is an unknown function of the file /cgi-bin/t...
CVE-2026-2532CRITICAL9.8A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the fil...
CVE-2026-2531HIGH7.3A security vulnerability has been detected in MindsDB up to 25.14.1. This vulnerability affects the function clear_filen...
CVE-2026-2530HIGH8.8A weakness has been identified in Wavlink WL-WN579A3 up to 20210219. This affects the function AddMac of the file /cgi-b...
CVE-2026-2529CRITICAL9.8A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteM...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now