2026 CVE Vulnerabilities
84,021 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26043 | — | — | — | Feb 11, 2026 | Rejected reason: Not used |
| CVE-2026-26042 | — | — | — | Feb 11, 2026 | Rejected reason: Not used |
| CVE-2026-26041 | — | — | — | Feb 11, 2026 | Rejected reason: Not used |
| CVE-2026-26040 | — | — | — | Feb 11, 2026 | Rejected reason: Not used |
| CVE-2026-26039 | — | — | — | Feb 11, 2026 | Rejected reason: Not used |
| CVE-2026-26038 | — | — | — | Feb 11, 2026 | Rejected reason: Not used |
| CVE-2026-26037 | — | — | — | Feb 11, 2026 | Rejected reason: Not used |
| CVE-2026-26036 | — | — | — | Feb 11, 2026 | Rejected reason: Not used |
| CVE-2026-1893 | MEDIUM | 6.4 | 0.2% | Feb 11, 2026 | The Orbisius Random Name Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_label'... |
| CVE-2026-1231 | MEDIUM | 6.4 | 0.2% | Feb 11, 2026 | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site ... |
| CVE-2026-1571 | MEDIUM | 6.1 | 0.3% | Feb 11, 2026 | User-controlled input is reflected into the HTML output without proper encoding on TP-Link Archer C60 v3, allowing arbit... |
| CVE-2026-25872 | MEDIUM | 6.9 | 0.7% | Feb 10, 2026 | JUNG Smart Panel KNX firmware version L1.12.22 and prior contain an unauthenticated path traversal vulnerability in the ... |
| CVE-2026-25870 | MEDIUM | 6.9 | 0.3% | Feb 10, 2026 | DoraCMS version 3.1 and prior contains a server-side request forgery (SSRF) vulnerability in its UEditor remote image fe... |
| CVE-2026-25251 | — | — | — | Feb 10, 2026 | Rejected reason: This has been moved to the REJECTED state because the information source is under review. If circumstan... |
| CVE-2026-26013 | LOW | 3.7 | 0.4% | Feb 10, 2026 | LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.get_num_token... |
| CVE-2026-26007 | MEDIUM | 6.5 | 0.3% | Feb 10, 2026 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5,... |
| CVE-2026-26006 | MEDIUM | 6.5 | 0.5% | Feb 10, 2026 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut... |
| CVE-2026-1507 | HIGH | 8.7 | 0.3% | Feb 10, 2026 | The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely c... |
| CVE-2026-1495 | MEDIUM | 6.5 | 0.1% | Feb 10, 2026 | The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy... |
| CVE-2026-2303 | MEDIUM | 6.9 | 0.2% | Feb 10, 2026 | The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrap... |
| CVE-2026-21349 | HIGH | 7.8 | 0.1% | Feb 10, 2026 | Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in ar... |
| CVE-2026-21348 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | Substance3D - Modeler versions 1.22.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to... |
| CVE-2026-1763 | MEDIUM | 4.6 | 0.2% | Feb 10, 2026 | Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions. |
| CVE-2026-1762 | LOW | 2.9 | 0.2% | Feb 10, 2026 | A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 a... |
| CVE-2026-2302 | MEDIUM | 6.9 | 0.2% | Feb 10, 2026 | Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may al... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now