2026 CVE Vulnerabilities
83,654 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26302 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26301 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26300 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26299 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26298 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26297 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26296 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26295 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-24853 | CRITICAL | 9.8 | 0.3% | Feb 13, 2026 | Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the... |
| CVE-2026-26273 | CRITICAL | 9.8 | 0.7% | Feb 13, 2026 | Known is a social publishing platform. Prior to 1.6.3, a Critical Broken Authentication vulnerability exists in Known 1.... |
| CVE-2026-1844 | HIGH | 7.2 | 0.3% | Feb 13, 2026 | The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' param... |
| CVE-2026-1841 | HIGH | 7.2 | 0.3% | Feb 13, 2026 | The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripti... |
| CVE-2026-26335 | CRITICAL | 9.8 | 2.8% | Feb 13, 2026 | Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web app... |
| CVE-2026-26334 | HIGH | 7.8 | 0.1% | Feb 13, 2026 | Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (V... |
| CVE-2026-26333 | CRITICAL | 9.8 | 0.9% | Feb 13, 2026 | Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The se... |
| CVE-2026-26269 | HIGH | 7.5 | 0.3% | Feb 13, 2026 | Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim'... |
| CVE-2026-2441 | HIGH | 8.8 | 22.0% | Feb 13, 2026 | Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-26264 | HIGH | 8.1 | 0.4% | Feb 13, 2026 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a ma... |
| CVE-2026-26208 | HIGH | 7.8 | 0.2% | Feb 13, 2026 | ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserial... |
| CVE-2026-26190 | CRITICAL | 9.8 | 27.7% | Feb 13, 2026 | Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus expose... |
| CVE-2026-26187 | HIGH | 8.1 | 0.4% | Feb 13, 2026 | lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to 1.77.0, the local bl... |
| CVE-2026-25991 | HIGH | 7.7 | 0.3% | Feb 13, 2026 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, the... |
| CVE-2026-25964 | MEDIUM | 4.9 | 0.4% | Feb 13, 2026 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, a P... |
| CVE-2026-21878 | HIGH | 7.5 | 0.4% | Feb 13, 2026 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability ... |
| CVE-2026-21870 | MEDIUM | 5.5 | 0.2% | Feb 13, 2026 | BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communicat... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now