2026 CVE Vulnerabilities
83,677 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26091 | — | — | — | Feb 12, 2026 | Rejected reason: Not used |
| CVE-2026-26090 | — | — | — | Feb 12, 2026 | Rejected reason: Not used |
| CVE-2026-26089 | — | — | — | Feb 12, 2026 | Rejected reason: Not used |
| CVE-2026-26088 | — | — | — | Feb 12, 2026 | Rejected reason: Not used |
| CVE-2026-26087 | — | — | — | Feb 12, 2026 | Rejected reason: Not used |
| CVE-2026-26086 | — | — | — | Feb 12, 2026 | Rejected reason: Not used |
| CVE-2026-26085 | — | — | — | Feb 12, 2026 | Rejected reason: Not used |
| CVE-2026-25676 | HIGH | 7.8 | 0.2% | Feb 12, 2026 | The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely l... |
| CVE-2026-26235 | HIGH | 8.7 | 1.8% | Feb 12, 2026 | JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remo... |
| CVE-2026-26234 | HIGH | 8.8 | 0.5% | Feb 12, 2026 | JUNG Smart Visu Server 1.1.1050 contains a request header manipulation vulnerability that allows unauthenticated attacke... |
| CVE-2026-1537 | MEDIUM | 5.3 | 0.2% | Feb 12, 2026 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to unauthorized a... |
| CVE-2026-23857 | HIGH | 8.2 | 0.1% | Feb 12, 2026 | Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient P... |
| CVE-2026-23856 | HIGH | 7.8 | 0.1% | Feb 12, 2026 | Dell iDRAC Service Module (iSM) for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module (iSM) for Linux, v... |
| CVE-2026-0969 | HIGH | 8.8 | 0.6% | Feb 12, 2026 | The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to insuffici... |
| CVE-2026-1729 | CRITICAL | 9.8 | 0.6% | Feb 12, 2026 | The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12. Th... |
| CVE-2026-26215 | CRITICAL | 9.3 | 0.9% | Feb 11, 2026 | manga-image-translator version beta-0.3 and prior in shared API mode contains an unsafe deserialization vulnerability th... |
| CVE-2026-20700 | HIGH | 7.8 | 1.3% | Feb 11, 2026 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3,... |
| CVE-2026-20682 | MEDIUM | 5.3 | 0.2% | Feb 11, 2026 | A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.... |
| CVE-2026-20681 | LOW | 3.3 | 0.1% | Feb 11, 2026 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 2... |
| CVE-2026-20680 | MEDIUM | 6.5 | 0.1% | Feb 11, 2026 | The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in iOS 18.7... |
| CVE-2026-20678 | MEDIUM | 5.5 | 0.1% | Feb 11, 2026 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5... |
| CVE-2026-20677 | CRITICAL | 9 | 0.3% | Feb 11, 2026 | A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18... |
| CVE-2026-20676 | MEDIUM | 5.3 | 0.2% | Feb 11, 2026 | This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3... |
| CVE-2026-20675 | MEDIUM | 5.5 | 0.2% | Feb 11, 2026 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and i... |
| CVE-2026-20674 | MEDIUM | 4.6 | 0.1% | Feb 11, 2026 | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker w... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now