2026 CVE Vulnerabilities
83,680 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2249 | CRITICAL | 9.8 | 0.5% | Feb 11, 2026 | METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not requi... |
| CVE-2026-2248 | CRITICAL | 9.8 | 0.5% | Feb 11, 2026 | METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not requi... |
| CVE-2026-2337 | HIGH | 8.7 | 0.3% | Feb 11, 2026 | A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of... |
| CVE-2026-1227 | HIGH | 7 | 0.1% | Feb 11, 2026 | CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized disclo... |
| CVE-2026-1226 | HIGH | 7 | 0.1% | Feb 11, 2026 | CWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of untrusted or unintende... |
| CVE-2026-0910 | HIGH | 8.8 | 0.5% | Feb 11, 2026 | The wpForo Forum plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.13... |
| CVE-2026-22894 | MEDIUM | 6.5 | 0.5% | Feb 11, 2026 | A path traversal vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, th... |
| CVE-2026-1458 | HIGH | 7.5 | 0.4% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.0 before 18.6.6, 18.7 before 18.7.4, and 18... |
| CVE-2026-1456 | HIGH | 7.5 | 0.4% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.7.4, and 18.8 before 18.8.4 th... |
| CVE-2026-1387 | MEDIUM | 6.5 | 0.3% | Feb 11, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7 before 18.7.4, and 18.8... |
| CVE-2026-1282 | MEDIUM | 5.4 | 0.2% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 1... |
| CVE-2026-1094 | MEDIUM | 4.6 | 0.2% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 18.8.4 that could have allowed an... |
| CVE-2026-1080 | MEDIUM | 4.3 | 0.2% | Feb 11, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 16.7 before 18.6.6, 18.7 before 18.7.4, and 18.8... |
| CVE-2026-0958 | HIGH | 7.5 | 0.4% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 1... |
| CVE-2026-0595 | MEDIUM | 5.4 | 0.2% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 18.6.6, 18.7 before 18.7.4, and 1... |
| CVE-2026-2295 | MEDIUM | 5.3 | 0.3% | Feb 11, 2026 | The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access ... |
| CVE-2026-1885 | MEDIUM | 6.4 | 0.2% | Feb 11, 2026 | The Slideshow Wp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sswpid' attribute of the 'ss... |
| CVE-2026-1853 | MEDIUM | 6.4 | 0.2% | Feb 11, 2026 | The BuddyHolis ListSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listsearch... |
| CVE-2026-1833 | MEDIUM | 5.3 | 0.3% | Feb 11, 2026 | The WaMate Confirm – Order Confirmation plugin for WordPress is vulnerable to unauthorized access in all versions up to,... |
| CVE-2026-1827 | MEDIUM | 6.4 | 0.2% | Feb 11, 2026 | The Flask Micro code-editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's codeflask... |
| CVE-2026-1826 | MEDIUM | 6.4 | 0.3% | Feb 11, 2026 | The OpenPOS Lite – Point of Sale for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t... |
| CVE-2026-1821 | MEDIUM | 6.4 | 0.2% | Feb 11, 2026 | The Microtango plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'restkey' parameter of the mt_r... |
| CVE-2026-1809 | MEDIUM | 6.4 | 0.3% | Feb 11, 2026 | The HTML Tag Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in... |
| CVE-2026-1804 | MEDIUM | 6.4 | 0.2% | Feb 11, 2026 | The WDES Responsive Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wdes-popup... |
| CVE-2026-1786 | MEDIUM | 6.5 | 0.3% | Feb 11, 2026 | The Twitter posts to Blog plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capab... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now