2026 CVE Vulnerabilities
84,037 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23906 | CRITICAL | 9.8 | 1.0% | Feb 10, 2026 | Affected Products and Versions * Apache Druid * Affected Versions: 0.17.0 through 35.x (all versions prior to 36.0... |
| CVE-2026-23901 | LOW | 2.5 | 0.2% | Feb 10, 2026 | Observable Timing Discrepancy vulnerability in Apache Shiro. This issue affects Apache Shiro: from 1.*, 2.* before 2.0.... |
| CVE-2026-23720 | HIGH | 7.3 | 0.2% | Feb 10, 2026 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).... |
| CVE-2026-23719 | HIGH | 7.3 | 0.1% | Feb 10, 2026 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).... |
| CVE-2026-23718 | HIGH | 7.3 | 0.1% | Feb 10, 2026 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).... |
| CVE-2026-23717 | HIGH | 7.3 | 0.1% | Feb 10, 2026 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).... |
| CVE-2026-23716 | HIGH | 7.3 | 0.1% | Feb 10, 2026 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).... |
| CVE-2026-23715 | HIGH | 7.3 | 0.2% | Feb 10, 2026 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).... |
| CVE-2026-22923 | HIGH | 7.8 | 0.1% | Feb 10, 2026 | A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected... |
| CVE-2026-1922 | MEDIUM | 6.4 | 0.2% | Feb 10, 2026 | The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug... |
| CVE-2026-1866 | HIGH | 7.2 | 0.3% | Feb 10, 2026 | The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in ... |
| CVE-2026-1722 | MEDIUM | 5.3 | 0.3% | Feb 10, 2026 | The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Obj... |
| CVE-2026-2099 | MEDIUM | 5.4 | 0.2% | Feb 10, 2026 | AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers... |
| CVE-2026-2098 | MEDIUM | 6.1 | 0.2% | Feb 10, 2026 | AgentFlow developed by Flowring has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote atta... |
| CVE-2026-2097 | HIGH | 8.8 | 0.4% | Feb 10, 2026 | Agentflow developed by Flowring has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to u... |
| CVE-2026-2096 | CRITICAL | 9.8 | 0.5% | Feb 10, 2026 | Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to... |
| CVE-2026-2095 | CRITICAL | 9.8 | 0.5% | Feb 10, 2026 | Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to... |
| CVE-2026-2094 | HIGH | 8.8 | 0.3% | Feb 10, 2026 | Docpedia developed by Flowring has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbi... |
| CVE-2026-2093 | HIGH | 8.7 | 0.5% | Feb 10, 2026 | Docpedia developed by Flowring has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject ar... |
| CVE-2026-0996 | MEDIUM | 6.4 | 0.3% | Feb 10, 2026 | The Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AI Form Builder module in all... |
| CVE-2026-25981 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25980 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25979 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25978 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25977 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now