2026 CVE Vulnerabilities
83,680 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25633 | MEDIUM | 4.3 | 0.3% | Feb 11, 2026 | Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permis... |
| CVE-2026-25062 | MEDIUM | 5.5 | 0.4% | Feb 11, 2026 | Outline is a service that allows for collaborative documentation. Prior to 1.4.0, during the JSON import process, the va... |
| CVE-2026-2323 | MEDIUM | 4.3 | 0.2% | Feb 11, 2026 | Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform U... |
| CVE-2026-2322 | MEDIUM | 5.4 | 0.2% | Feb 11, 2026 | Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinc... |
| CVE-2026-2321 | HIGH | 8.8 | 0.2% | Feb 11, 2026 | Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage... |
| CVE-2026-2320 | MEDIUM | 6.5 | 0.2% | Feb 11, 2026 | Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinc... |
| CVE-2026-2319 | HIGH | 7.5 | 0.2% | Feb 11, 2026 | Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in spe... |
| CVE-2026-2318 | MEDIUM | 6.5 | 0.2% | Feb 11, 2026 | Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who c... |
| CVE-2026-2317 | MEDIUM | 6.5 | 0.2% | Feb 11, 2026 | Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cros... |
| CVE-2026-2316 | MEDIUM | 6.5 | 0.2% | Feb 11, 2026 | Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform U... |
| CVE-2026-2315 | HIGH | 8.8 | 8.8% | Feb 11, 2026 | Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially ... |
| CVE-2026-2314 | HIGH | 8.8 | 4.2% | Feb 11, 2026 | Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit ... |
| CVE-2026-2313 | HIGH | 8.8 | 4.1% | Feb 11, 2026 | Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2026-2361 | HIGH | 8 | 0.3% | Feb 11, 2026 | PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a temporary v... |
| CVE-2026-2360 | HIGH | 8 | 0.4% | Feb 11, 2026 | PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom oper... |
| CVE-2026-0229 | MEDIUM | 6.6 | 0.6% | Feb 11, 2026 | A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® softwa... |
| CVE-2026-0228 | LOW | 1.3 | 0.2% | Feb 11, 2026 | An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to ... |
| CVE-2026-25084 | CRITICAL | 9.8 | 0.7% | Feb 11, 2026 | Authentication for ZLAN5143D can be bypassed by directly accessing internal URLs. |
| CVE-2026-24789 | CRITICAL | 9.8 | 0.7% | Feb 11, 2026 | An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication. |
| CVE-2026-25869 | HIGH | 7.5 | 0.5% | Feb 11, 2026 | MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The app... |
| CVE-2026-25868 | MEDIUM | 6.1 | 0.3% | Feb 11, 2026 | MiniGal Nano version 0.3.5 and prior contain a reflected cross-site scripting (XSS) vulnerability in index.php via the d... |
| CVE-2026-1837 | HIGH | 7.5 | 0.2% | Feb 11, 2026 | A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after ... |
| CVE-2026-2345 | LOW | 3.6 | 0.1% | Feb 11, 2026 | Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.add... |
| CVE-2026-2344 | HIGH | 8.6 | 0.2% | Feb 11, 2026 | A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged use... |
| CVE-2026-2250 | HIGH | 7.5 | 0.4% | Feb 11, 2026 | The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and exp... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now