2026 CVE Vulnerabilities
83,673 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26069 | HIGH | 7.5 | 0.3% | Feb 12, 2026 | Scraparr is a Prometheus Exporter for various components of the *arr Suite. From 3.0.0-beta to before 3.0.2, when the Re... |
| CVE-2026-26068 | CRITICAL | 9.9 | 3.3% | Feb 12, 2026 | emp3r0r is a stealth-focused C2 designed by Linux users for Linux environments. Prior to 3.21.1, untrusted agent metadat... |
| CVE-2026-26056 | HIGH | 8.8 | 0.4% | Feb 12, 2026 | Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in ... |
| CVE-2026-26055 | HIGH | 7.5 | 0.4% | Feb 12, 2026 | Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in ... |
| CVE-2026-25828 | MEDIUM | 5.4 | 1.2% | Feb 12, 2026 | grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because... |
| CVE-2026-1358 | CRITICAL | 9.8 | 1.2% | Feb 12, 2026 | Airleader Master versions 6.381 and prior allow for file uploads without restriction to multiple webpages running maxim... |
| CVE-2026-26020 | HIGH | 8.8 | 0.5% | Feb 12, 2026 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut... |
| CVE-2026-26011 | CRITICAL | 9.8 | 0.5% | Feb 12, 2026 | navigation2 is a ROS 2 Navigation Framework and System. In 1.3.11 and earlier, a critical heap out-of-bounds write vulne... |
| CVE-2026-26005 | MEDIUM | 5 | 0.2% | Feb 12, 2026 | ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #45, in Clip Bucket V5, The Remote Play allows ... |
| CVE-2026-26000 | MEDIUM | 6.1 | 0.3% | Feb 12, 2026 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0... |
| CVE-2026-25996 | CRITICAL | 9.8 | 0.6% | Feb 12, 2026 | Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Li... |
| CVE-2026-0619 | MEDIUM | 6 | 0.3% | Feb 12, 2026 | A reachable infinite loop via an integer wraparound is present in Silicon Labs' Matter SDK which allows an attacker to t... |
| CVE-2026-25949 | HIGH | 7.5 | 0.7% | Feb 12, 2026 | Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managi... |
| CVE-2026-25933 | MEDIUM | 6.8 | 0.2% | Feb 12, 2026 | Arduino App Lab is a cross-platform IDE for developing Arduino Apps. Prior to 0.4.0, a vulnerability was identified in t... |
| CVE-2026-25922 | HIGH | 8.8 | 0.2% | Feb 12, 2026 | authentik is an open-source identity provider. Prior to 2025.8.6, 2025.10.4, and 2025.12.4, when using a SAML Source tha... |
| CVE-2026-25768 | MEDIUM | 6.5 | 0.2% | Feb 12, 2026 | LavinMQ is a high-performance message queue & streaming server. Before 2.6.6, an authenticated user could access metadat... |
| CVE-2026-25767 | HIGH | 8.1 | 0.3% | Feb 12, 2026 | LavinMQ is a high-performance message queue & streaming server. Before 2.6.8, an authenticated user, with the “Policymak... |
| CVE-2026-25748 | HIGH | 7.5 | 0.5% | Feb 12, 2026 | authentik is an open-source identity provider. Prior to 2025.10.4 and 2025.12.4, with a malformed cookie it was possible... |
| CVE-2026-25227 | HIGH | 7.2 | 0.6% | Feb 12, 2026 | authentik is an open-source identity provider. From 2021.3.1 to before 2025.8.6, 2025.10.4, and 2025.12.4, when using de... |
| CVE-2026-24895 | CRITICAL | 9.8 | 0.6% | Feb 12, 2026 | FrankenPHP is a modern application server for PHP. Prior to 1.11.2, FrankenPHP’s CGI path splitting logic improperly han... |
| CVE-2026-24894 | HIGH | 7.5 | 0.4% | Feb 12, 2026 | FrankenPHP is a modern application server for PHP. Prior to 1.11.2, when running FrankenPHP in worker mode, the $_SESSIO... |
| CVE-2026-24044 | CRITICAL | 9.2 | 0.3% | Feb 12, 2026 | Element Server Suite Community Edition (ESS Community) deploys a Matrix stack using the provided Helm charts and Kuberne... |
| CVE-2026-26219 | CRITICAL | 9.3 | 0.2% | Feb 12, 2026 | newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm. The implementation does not inco... |
| CVE-2026-26218 | CRITICAL | 9.8 | 0.4% | Feb 12, 2026 | newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisi... |
| CVE-2026-22821 | MEDIUM | 6.5 | 0.2% | Feb 12, 2026 | mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vul... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now