2026 CVE Vulnerabilities

83,545 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-2529CRITICAL9.8A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteM...
CVE-2026-2528CRITICAL9.8A vulnerability was identified in Wavlink WL-WN579A3 up to 20210219. Affected by this vulnerability is the function Dele...
CVE-2026-2527CRITICAL9.8A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219. Affected is an unknown function of the file /cgi-bi...
CVE-2026-2526HIGH8.8A vulnerability was found in Wavlink WL-WN579A3 up to 20210219. This impacts the function multi_ssid of the file /cgi-bi...
CVE-2026-2525HIGH7.5A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoi...
CVE-2026-2524HIGH7.5A flaw has been found in Open5GS 2.7.6. The impacted element is the function mme_s11_handle_create_session_response of t...
CVE-2026-2523HIGH7.5A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smf_gn_handle_create_pdp_conte...
CVE-2026-2522CRITICAL9.8A security vulnerability has been detected in Open5GS up to 2.7.6. Impacted is an unknown function of the file /src/mme/...
CVE-2026-2521CRITICAL9.8A weakness has been identified in Open5GS up to 2.7.6. This issue affects the function sgwc_s5c_handle_create_session_re...
CVE-2026-26369HIGH8.8eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege escalation vulnerability due to insufficient authorization c...
CVE-2026-26368HIGH8.8eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the resetUserPassword JSON-RPC ...
CVE-2026-26367HIGH8.1eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the deleteUserAccount JSON-RPC ...
CVE-2026-26366CRITICAL9.8eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active after ...
CVE-2026-2517HIGH7.5A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft i...
CVE-2026-2516HIGH7A vulnerability was identified in Unidocs ezPDF DRM Reader and ezPDF Reader 2.0/3.0.0.4. This affects an unknown part in...
CVE-2026-2541MEDIUM6.4The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing onl...
CVE-2026-2540HIGH8.4The Micca KE700 system contains flawed resynchronization logic and is vulnerable to replay attacks. This attack requires...
CVE-2026-2539MEDIUM5.7The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a r...
CVE-2026-1793MEDIUM6.5The Element Pack Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in all versions up to, ...
CVE-2026-1750HIGH8.8The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versio...
CVE-2026-1490CRITICAL9.8The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugi...
CVE-2026-23210MEDIUM4.7In the Linux kernel, the following vulnerability has been resolved: ice: Fix PTP NULL pointer dereference during VSI re...
CVE-2026-23209HIGH7.8In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newli...
CVE-2026-23208HIGH7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Prevent excessive number of frames...
CVE-2026-23207MEDIUM4.7In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect curr_xfer check in IRQ ...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now