2026 CVE Vulnerabilities
84,037 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25976 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25975 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25974 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25973 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-2260 | HIGH | 7.3 | 5.0% | Feb 10, 2026 | A vulnerability was found in D-Link DCS-931L up to 1.13.0. This affects an unknown part of the file /goform/setSysAdmin.... |
| CVE-2026-2259 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | A vulnerability has been found in aardappel lobster up to 2025.4. Affected by this issue is the function lobster::Parser... |
| CVE-2026-24328 | MEDIUM | 6.1 | 0.2% | Feb 10, 2026 | SAP TAF_APPLAUNCHER within Business Server Pages allows unauthenticated attacker to craft malicious links that, when cli... |
| CVE-2026-24327 | MEDIUM | 4.3 | 0.2% | Feb 10, 2026 | Due to missing authorization check in SAP Strategic Enterprise Management (Balanced Scorecard in Business Server Pages),... |
| CVE-2026-24326 | MEDIUM | 4.3 | 0.2% | Feb 10, 2026 | Due to a missing authorization check in the Disconnected Operations of the SAP S/4HANA Defense & Security, an attacker w... |
| CVE-2026-24325 | MEDIUM | 4.8 | 0.2% | Feb 10, 2026 | SAP BusinessObjects Enterprise does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site Scripti... |
| CVE-2026-24324 | MEDIUM | 6.5 | 0.3% | Feb 10, 2026 | SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker with user privileges to... |
| CVE-2026-24323 | MEDIUM | 6.1 | 0.2% | Feb 10, 2026 | The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters... |
| CVE-2026-24322 | HIGH | 7.7 | 0.2% | Feb 10, 2026 | SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks f... |
| CVE-2026-24321 | MEDIUM | 5.3 | 0.2% | Feb 10, 2026 | SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these op... |
| CVE-2026-24320 | LOW | 3.1 | 0.2% | Feb 10, 2026 | Due to improper memory management in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacke... |
| CVE-2026-24319 | MEDIUM | 5.8 | 0.1% | Feb 10, 2026 | In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gainin... |
| CVE-2026-24312 | MEDIUM | 5.2 | 0.2% | Feb 10, 2026 | An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authenticated administrative... |
| CVE-2026-23689 | HIGH | 7.7 | 0.4% | Feb 10, 2026 | Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular us... |
| CVE-2026-23688 | MEDIUM | 4.3 | 0.2% | Feb 10, 2026 | SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, res... |
| CVE-2026-23687 | HIGH | 8.8 | 0.5% | Feb 10, 2026 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtai... |
| CVE-2026-23686 | LOW | 3.4 | 0.2% | Feb 10, 2026 | Due to a CRLF Injection vulnerability in SAP NetWeaver Application Server Java, an authenticated attacker with administr... |
| CVE-2026-23685 | MEDIUM | 4.4 | 0.1% | Feb 10, 2026 | Due to a Deserialization vulnerability in SAP NetWeaver (JMS service), an attacker authenticated as an administrator wit... |
| CVE-2026-23684 | MEDIUM | 5.9 | 0.2% | Feb 10, 2026 | A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a car... |
| CVE-2026-23681 | MEDIUM | 4.3 | 0.2% | Feb 10, 2026 | Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authenticated attacker could in... |
| CVE-2026-0509 | CRITICAL | 9.6 | 0.3% | Feb 10, 2026 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform backgrou... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now