2026 CVE Vulnerabilities
84,056 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25493 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Craft is a platform for creating digital experiences. In Craft versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through ... |
| CVE-2026-25492 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the save... |
| CVE-2026-25491 | MEDIUM | 4.8 | 0.3% | Feb 9, 2026 | Craft is a platform for creating digital experiences. From 5.0.0-RC1 to 5.8.21, Craft has a stored XSS via Entry Type na... |
| CVE-2026-25480 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, FileStore maps cache keys to fil... |
| CVE-2026-25479 | MEDIUM | 6.5 | 0.3% | Feb 9, 2026 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, in litestar.middleware.allowed_h... |
| CVE-2026-25478 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, CORSConfig.allowed_origins_regex... |
| CVE-2026-25231 | HIGH | 7.5 | 0.4% | Feb 9, 2026 | FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0, the application contains an unauthe... |
| CVE-2026-25230 | MEDIUM | 5.4 | 0.2% | Feb 9, 2026 | FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an au... |
| CVE-2026-25057 | CRITICAL | 9.1 | 0.5% | Feb 9, 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able ... |
| CVE-2026-24900 | MEDIUM | 6.5 | 0.3% | Feb 9, 2026 | MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, the courses/<:course_... |
| CVE-2026-1529 | HIGH | 8.1 | 0.5% | Feb 9, 2026 | A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the organization ID and target ema... |
| CVE-2026-1486 | HIGH | 8.8 | 0.4% | Feb 9, 2026 | A flaw was found in Keycloak. A vulnerability exists in the jwt-authorization-grant flow where the server fails to verif... |
| CVE-2026-24777 | MEDIUM | 6.7 | 0.3% | Feb 9, 2026 | OpenProject is an open-source, web-based project management software. Prior to 17.0.2, users with the Manage Users permi... |
| CVE-2026-24684 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can p... |
| CVE-2026-24683 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. ainput_send_input_event caches channel_callback in a lo... |
| CVE-2026-24682 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audin_server_recv_formats frees an inc... |
| CVE-2026-24681 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, aAsynchronous bulk transfer completion... |
| CVE-2026-24680 | HIGH | 7.5 | 0.4% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, sdl_Pointer_New frees data on failure,... |
| CVE-2026-24679 | CRITICAL | 9.1 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, The URBDRC client uses server-supplied... |
| CVE-2026-24678 | HIGH | 7.5 | 0.6% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample response... |
| CVE-2026-24677 | CRITICAL | 9.1 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecam_encoder_compress_h264 trusts serv... |
| CVE-2026-24676 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the a... |
| CVE-2026-24675 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the devi... |
| CVE-2026-24491 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notificati... |
| CVE-2026-23948 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerabili... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now