2026 CVE Vulnerabilities

84,027 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-2303MEDIUM6.9The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrap...
CVE-2026-21349HIGH7.8Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in ar...
CVE-2026-21348MEDIUM5.5Substance3D - Modeler versions 1.22.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to...
CVE-2026-1763MEDIUM4.6Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions.
CVE-2026-1762LOW2.9A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 a...
CVE-2026-2302MEDIUM6.9Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may al...
CVE-2026-26009CRITICAL9.9Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install...
CVE-2026-25613HIGH7.1An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compo...
CVE-2026-25610HIGH7.1An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.
CVE-2026-25609MEDIUM4.3Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read...
CVE-2026-25506HIGH7.8MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can ...
CVE-2026-21355MEDIUM5.5DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory ex...
CVE-2026-21354MEDIUM5.5DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead ...
CVE-2026-21353HIGH7.8DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could resul...
CVE-2026-21352HIGH7.8DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitr...
CVE-2026-21347HIGH7.8Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could re...
CVE-2026-21346HIGH7.8Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arb...
CVE-2026-21345HIGH7.8Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft...
CVE-2026-21344HIGH7.8Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft...
CVE-2026-21343HIGH7.8Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft...
CVE-2026-21342HIGH7.8Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result i...
CVE-2026-21341HIGH7.8Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result i...
CVE-2026-1850HIGH7.5Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.
CVE-2026-1849HIGH7.5MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents...
CVE-2026-1848HIGH8.2Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes i...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now