2026 CVE Vulnerabilities
83,678 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-20608 | MEDIUM | 5.5 | 0.2% | Feb 11, 2026 | This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18... |
| CVE-2026-20606 | HIGH | 7.1 | 0.1% | Feb 11, 2026 | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 ... |
| CVE-2026-20605 | MEDIUM | 4.6 | 0.2% | Feb 11, 2026 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoi... |
| CVE-2026-20603 | MEDIUM | 4.4 | 0.1% | Feb 11, 2026 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26.3. An a... |
| CVE-2026-20602 | MEDIUM | 5.5 | 0.1% | Feb 11, 2026 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8... |
| CVE-2026-20601 | LOW | 3.3 | 0.1% | Feb 11, 2026 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be a... |
| CVE-2026-1669 | HIGH | 7.5 | 0.3% | Feb 11, 2026 | Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supp... |
| CVE-2026-26031 | MEDIUM | 5.3 | 0.2% | Feb 11, 2026 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.44.0, ... |
| CVE-2026-26029 | HIGH | 7.5 | 0.9% | Feb 11, 2026 | sf-mcp-server is an implementation of Salesforce MCP server for Claude for Desktop. A command injection vulnerability ex... |
| CVE-2026-26023 | MEDIUM | 6.1 | 0.2% | Feb 11, 2026 | Dify is an open-source LLM app development platform. Prior to 1.13.0, a cross site scripting vulnerability has been foun... |
| CVE-2026-26021 | CRITICAL | 9.8 | 0.5% | Feb 11, 2026 | set-in provides the set value of nested associative structure given array of keys. A prototype pollution vulnerability e... |
| CVE-2026-26019 | MEDIUM | 4.1 | 0.4% | Feb 11, 2026 | LangChain is a framework for building LLM-powered applications. Prior to 1.1.14, the RecursiveUrlLoader class in @langch... |
| CVE-2026-26012 | MEDIUM | 6.5 | 0.3% | Feb 11, 2026 | vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.... |
| CVE-2026-26158 | HIGH | 7 | 0.2% | Feb 11, 2026 | A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction di... |
| CVE-2026-26157 | HIGH | 7 | 0.7% | Feb 11, 2026 | A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craf... |
| CVE-2026-26014 | MEDIUM | 5.9 | 0.6% | Feb 11, 2026 | Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1... |
| CVE-2026-26010 | HIGH | 7.6 | 0.3% | Feb 11, 2026 | OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines ... |
| CVE-2026-25999 | MEDIUM | 4.3 | 0.3% | Feb 11, 2026 | Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to 2.10.2, there is an improper acces... |
| CVE-2026-25994 | CRITICAL | 9.8 | 1.9% | Feb 11, 2026 | PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vu... |
| CVE-2026-25990 | HIGH | 7.5 | 0.4% | Feb 11, 2026 | Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a... |
| CVE-2026-25935 | MEDIUM | 5.4 | 0.2% | Feb 11, 2026 | Vikunja is a todo-app to organize your life. Prior to 1.1.0, TaskGlanceTooltip.vue temporarily creates a div and sets th... |
| CVE-2026-25924 | HIGH | 8.4 | 0.5% | Feb 11, 2026 | Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a security control bypass vulner... |
| CVE-2026-25759 | HIGH | 8.7 | 0.3% | Feb 11, 2026 | Statmatic is a Laravel and Git powered content management system (CMS). From 6.0.0 to before 6.2.3, a stored XSS vulnera... |
| CVE-2026-25633 | MEDIUM | 4.3 | 0.3% | Feb 11, 2026 | Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permis... |
| CVE-2026-25062 | MEDIUM | 5.5 | 0.4% | Feb 11, 2026 | Outline is a service that allows for collaborative documentation. Prior to 1.4.0, during the JSON import process, the va... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now