2026 CVE Vulnerabilities
83,657 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26249 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-25108 | HIGH | 8.8 | 5.0% | Feb 13, 2026 | FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user... |
| CVE-2026-1721 | MEDIUM | 6.2 | 0.4% | Feb 13, 2026 | Summary A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth callback handl... |
| CVE-2026-26188 | MEDIUM | 5.4 | 0.3% | Feb 12, 2026 | Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. An authenticated, low-privilege user ... |
| CVE-2026-26225 | HIGH | 8.5 | 0.2% | Feb 12, 2026 | Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones,... |
| CVE-2026-26224 | HIGH | 8.5 | 0.1% | Feb 12, 2026 | Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and applicati... |
| CVE-2026-26185 | MEDIUM | 5.3 | 0.3% | Feb 12, 2026 | Directus is a real-time API and App dashboard for managing SQL database content. Before 11.14.1, a timing-based user enu... |
| CVE-2026-26076 | HIGH | 7.5 | 0.3% | Feb 12, 2026 | ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker can remotely induce ... |
| CVE-2026-26075 | MEDIUM | 5.4 | 0.1% | Feb 12, 2026 | FastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. ne... |
| CVE-2026-26069 | HIGH | 7.5 | 0.3% | Feb 12, 2026 | Scraparr is a Prometheus Exporter for various components of the *arr Suite. From 3.0.0-beta to before 3.0.2, when the Re... |
| CVE-2026-26068 | CRITICAL | 9.9 | 3.3% | Feb 12, 2026 | emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadat... |
| CVE-2026-26056 | HIGH | 8.8 | 0.4% | Feb 12, 2026 | Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in ... |
| CVE-2026-26055 | HIGH | 7.5 | 0.4% | Feb 12, 2026 | Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in ... |
| CVE-2026-25828 | MEDIUM | 5.4 | 1.2% | Feb 12, 2026 | grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because... |
| CVE-2026-1358 | CRITICAL | 9.8 | 1.2% | Feb 12, 2026 | Airleader Master versions 6.381 and prior allow for file uploads without restriction to multiple webpages running maxim... |
| CVE-2026-26020 | HIGH | 8.8 | 0.5% | Feb 12, 2026 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut... |
| CVE-2026-26011 | CRITICAL | 9.8 | 0.5% | Feb 12, 2026 | navigation2 is a ROS 2 Navigation Framework and System. In 1.3.11 and earlier, a critical heap out-of-bounds write vulne... |
| CVE-2026-26005 | MEDIUM | 5 | 0.2% | Feb 12, 2026 | ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #45, in Clip Bucket V5, The Remote Play allows ... |
| CVE-2026-26000 | MEDIUM | 6.1 | 0.3% | Feb 12, 2026 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0... |
| CVE-2026-25996 | CRITICAL | 9.8 | 0.6% | Feb 12, 2026 | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Li... |
| CVE-2026-0619 | MEDIUM | 6 | 0.3% | Feb 12, 2026 | A reachable infinite loop via an integer wraparound is present in Silicon Labs' Matter SDK which allows an attacker to t... |
| CVE-2026-25949 | HIGH | 7.5 | 0.7% | Feb 12, 2026 | Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managi... |
| CVE-2026-25933 | MEDIUM | 6.8 | 0.2% | Feb 12, 2026 | Arduino App Lab is a cross-platform IDE for developing Arduino Apps. Prior to 0.4.0, a vulnerability was identified in t... |
| CVE-2026-25922 | HIGH | 8.8 | 0.2% | Feb 12, 2026 | authentik is an open-source identity provider. Prior to 2025.8.6, 2025.10.4, and 2025.12.4, when using a SAML Source tha... |
| CVE-2026-25768 | MEDIUM | 6.5 | 0.2% | Feb 12, 2026 | LavinMQ is a high-performance message queue & streaming server. Before 2.6.6, an authenticated user could access metadat... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now