2026 CVE Vulnerabilities
83,690 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26037 | — | — | — | Feb 11, 2026 | Rejected reason: Not used |
| CVE-2026-26036 | — | — | — | Feb 11, 2026 | Rejected reason: Not used |
| CVE-2026-1893 | MEDIUM | 6.4 | 0.2% | Feb 11, 2026 | The Orbisius Random Name Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_label'... |
| CVE-2026-1231 | MEDIUM | 6.4 | 0.2% | Feb 11, 2026 | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site ... |
| CVE-2026-1571 | MEDIUM | 6.1 | 0.3% | Feb 11, 2026 | User-controlled input is reflected into the HTML output without proper encoding on TP-Link Archer C60 v3, allowing arbit... |
| CVE-2026-25872 | MEDIUM | 6.9 | 0.7% | Feb 10, 2026 | JUNG Smart Panel KNX firmware version L1.12.22 and prior contain an unauthenticated path traversal vulnerability in the ... |
| CVE-2026-25870 | MEDIUM | 6.9 | 0.3% | Feb 10, 2026 | DoraCMS version 3.1 and prior contains a server-side request forgery (SSRF) vulnerability in its UEditor remote image fe... |
| CVE-2026-25251 | — | — | — | Feb 10, 2026 | Rejected reason: This has been moved to the REJECTED state because the information source is under review. If circumstan... |
| CVE-2026-26013 | LOW | 3.7 | 0.4% | Feb 10, 2026 | LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.get_num_token... |
| CVE-2026-26007 | MEDIUM | 6.5 | 0.3% | Feb 10, 2026 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5,... |
| CVE-2026-26006 | MEDIUM | 6.5 | 0.5% | Feb 10, 2026 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut... |
| CVE-2026-1507 | HIGH | 8.7 | 0.3% | Feb 10, 2026 | The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely c... |
| CVE-2026-1495 | MEDIUM | 6.5 | 0.1% | Feb 10, 2026 | The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy... |
| CVE-2026-2303 | MEDIUM | 6.9 | 0.2% | Feb 10, 2026 | The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrap... |
| CVE-2026-21349 | HIGH | 7.8 | 0.1% | Feb 10, 2026 | Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in ar... |
| CVE-2026-21348 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | Substance3D - Modeler versions 1.22.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to... |
| CVE-2026-1763 | MEDIUM | 4.6 | 0.2% | Feb 10, 2026 | Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions. |
| CVE-2026-1762 | LOW | 2.9 | 0.2% | Feb 10, 2026 | A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 a... |
| CVE-2026-2302 | MEDIUM | 6.9 | 0.2% | Feb 10, 2026 | Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may al... |
| CVE-2026-26009 | CRITICAL | 9.9 | 0.5% | Feb 10, 2026 | Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install... |
| CVE-2026-25613 | HIGH | 7.1 | 0.2% | Feb 10, 2026 | An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compo... |
| CVE-2026-25610 | HIGH | 7.1 | 0.2% | Feb 10, 2026 | An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints. |
| CVE-2026-25609 | MEDIUM | 4.3 | 0.2% | Feb 10, 2026 | Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read... |
| CVE-2026-25506 | HIGH | 7.8 | 0.3% | Feb 10, 2026 | MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can ... |
| CVE-2026-21355 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory ex... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now