2026 CVE Vulnerabilities
84,038 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-0509 | CRITICAL | 9.6 | 0.3% | Feb 10, 2026 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated, low-privileged user to perform backgrou... |
| CVE-2026-0508 | HIGH | 8.1 | 0.3% | Feb 10, 2026 | The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert m... |
| CVE-2026-0505 | MEDIUM | 6.1 | 0.2% | Feb 10, 2026 | The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficientl... |
| CVE-2026-0490 | HIGH | 7.5 | 0.4% | Feb 10, 2026 | SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network request to the trusted en... |
| CVE-2026-0488 | CRITICAL | 9.9 | 0.5% | Feb 10, 2026 | An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function modul... |
| CVE-2026-0486 | MEDIUM | 4.3 | 0.2% | Feb 10, 2026 | In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authen... |
| CVE-2026-0485 | HIGH | 7.5 | 0.4% | Feb 10, 2026 | SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause t... |
| CVE-2026-0484 | MEDIUM | 6.5 | 0.3% | Feb 10, 2026 | Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker c... |
| CVE-2026-2258 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the function WaveFunctionColl... |
| CVE-2026-0845 | HIGH | 7.2 | 0.4% | Feb 10, 2026 | The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is... |
| CVE-2026-25958 | HIGH | 7.7 | 0.4% | Feb 9, 2026 | Cube is a semantic layer for building data applications. From 0.27.19 to before 1.5.13, 1.4.2, and 1.0.14, it is possibl... |
| CVE-2026-25957 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make ... |
| CVE-2026-25951 | HIGH | 7.2 | 1.2% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.11, there is a flaw in the path s... |
| CVE-2026-25939 | CRITICAL | 9.1 | 12.0% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authori... |
| CVE-2026-25938 | CRITICAL | 9.8 | 1.0% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication b... |
| CVE-2026-25934 | MEDIUM | 4.3 | 0.1% | Feb 9, 2026 | go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discov... |
| CVE-2026-25931 | HIGH | 7.8 | 0.1% | Feb 9, 2026 | vscode-spell-checker is a basic spell checker that works well with code and documents. Prior to v4.5.4, DocumentSettings... |
| CVE-2026-25895 | CRITICAL | 9.8 | 2.7% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows ... |
| CVE-2026-25894 | CRITICAL | 9.8 | 0.8% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An insecure default configuration in FUXA allo... |
| CVE-2026-25893 | CRITICAL | 9.8 | 0.7% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.10, an authentication bypass vuln... |
| CVE-2026-25961 | HIGH | 7.5 | 0.4% | Feb 9, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS host... |
| CVE-2026-25925 | HIGH | 7.8 | 0.3% | Feb 9, 2026 | PowerDocu contains a Windows GUI executable to perform technical documentations. Prior to 2.4.0, PowerDocu contains a cr... |
| CVE-2026-25923 | CRITICAL | 9.1 | 0.4% | Feb 9, 2026 | my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to ... |
| CVE-2026-25920 | MEDIUM | 5.5 | 0.2% | Feb 9, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in... |
| CVE-2026-25918 | MEDIUM | 5.5 | 0.1% | Feb 9, 2026 | unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-agains... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now