2026 CVE Vulnerabilities
84,038 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2245 | LOW | 3.3 | 0.1% | Feb 9, 2026 | A vulnerability was identified in CCExtractor up to 183. This affects the function parse_PAT/parse_PMT in the library sr... |
| CVE-2026-25598 | MEDIUM | 5.3 | 0.3% | Feb 9, 2026 | Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Prior to 2.14.2, a security v... |
| CVE-2026-25498 | HIGH | 7.2 | 1.0% | Feb 9, 2026 | Craft is a platform for creating digital experiences. In versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21... |
| CVE-2026-25497 | HIGH | 8.8 | 0.4% | Feb 9, 2026 | Craft is a platform for creating digital experiences. In Craft versions from 4.0.0-RC1 to before 4.17.0-beta.1 and 5.9.0... |
| CVE-2026-25496 | MEDIUM | 4.8 | 0.4% | Feb 9, 2026 | Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through ... |
| CVE-2026-25495 | HIGH | 8.8 | 0.5% | Feb 9, 2026 | Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through ... |
| CVE-2026-25494 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through... |
| CVE-2026-25493 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through ... |
| CVE-2026-25492 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the save... |
| CVE-2026-25491 | MEDIUM | 4.8 | 0.3% | Feb 9, 2026 | Craft is a platform for creating digital experiences. From 5.0.0-RC1 to 5.8.21, Craft has a stored XSS via Entry Type na... |
| CVE-2026-25480 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, FileStore maps cache keys to fil... |
| CVE-2026-25479 | MEDIUM | 6.5 | 0.3% | Feb 9, 2026 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, in litestar.middleware.allowed_h... |
| CVE-2026-25478 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, CORSConfig.allowed_origins_regex... |
| CVE-2026-25231 | HIGH | 7.5 | 0.4% | Feb 9, 2026 | FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0, the application contains an unauthe... |
| CVE-2026-25230 | MEDIUM | 5.4 | 0.2% | Feb 9, 2026 | FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an au... |
| CVE-2026-25057 | CRITICAL | 9.1 | 0.5% | Feb 9, 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able ... |
| CVE-2026-24900 | MEDIUM | 6.5 | 0.3% | Feb 9, 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, the courses/<:course_... |
| CVE-2026-1529 | HIGH | 8.1 | 0.5% | Feb 9, 2026 | A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the organization ID and target ema... |
| CVE-2026-1486 | HIGH | 8.8 | 0.4% | Feb 9, 2026 | A flaw was found in Keycloak. A vulnerability exists in the jwt-authorization-grant flow where the server fails to verif... |
| CVE-2026-24777 | MEDIUM | 6.7 | 0.3% | Feb 9, 2026 | OpenProject is an open-source, web-based project management software. Prior to 17.0.2, users with the Manage Users permi... |
| CVE-2026-24684 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can p... |
| CVE-2026-24683 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a lo... |
| CVE-2026-24682 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audin_server_recv_formats frees an inc... |
| CVE-2026-24681 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completion... |
| CVE-2026-24680 | HIGH | 7.5 | 0.4% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure,... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now