2026 CVE Vulnerabilities

84,107 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-2205MEDIUM5.3A vulnerability was identified in WeKan up to 8.20. This affects an unknown part of the file server/publications/cards.j...
CVE-2026-2129HIGH7.3A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /g...
CVE-2026-2122CRITICAL9.8A security flaw has been discovered in Xiaopi Panel up to 20260126. This impacts an unknown function of the file /demo.p...
CVE-2026-2120HIGH7.3A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_serve...
CVE-2026-2118HIGH7.3A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_4407D4 of the fil...
CVE-2026-2117CRITICAL9.8A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of ...
CVE-2026-2116CRITICAL9.8A vulnerability has been found in itsourcecode Society Management System 1.0. Impacted is an unknown function of the fil...
CVE-2026-2115CRITICAL9.8A flaw has been found in itsourcecode Society Management System 1.0. This issue affects some unknown processing of the f...
CVE-2026-2114CRITICAL9.8A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of t...
CVE-2026-25859HIGH8.8Wekan versions prior to 8.20 allow non-administrative users to access migration functionality due to insufficient permis...
CVE-2026-25858CRITICAL9.3macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workf...
CVE-2026-25857HIGH8.8Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagn...
CVE-2026-25568MEDIUM4.3WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allow...
CVE-2026-25567MEDIUM4.3WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in the card comment creation API. The en...
CVE-2026-25566MEDIUM5.4WeKan versions prior to 8.19 contain an authorization vulnerability in card move logic. A user can specify a destination...
CVE-2026-25565MEDIUM6.5WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only bo...
CVE-2026-25564HIGH7.5WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checkl...
CVE-2026-25563HIGH7.5WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checkl...
CVE-2026-25562MEDIUM4.3WeKan versions prior to 8.19 contain an information disclosure vulnerability in the attachments publication. Attachment ...
CVE-2026-25561HIGH7.5WeKan versions prior to 8.19 contain an authorization weakness in the attachment upload API. The API does not fully vali...
CVE-2026-25560CRITICAL9.8WeKan versions prior to 8.19 contain an LDAP filter injection vulnerability in LDAP authentication. User-supplied userna...
CVE-2026-2113CRITICAL9.8A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library...
CVE-2026-2111MEDIUM4.3A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this issue is some unknown functionality of the fil...
CVE-2026-2110HIGH8.1A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by th...
CVE-2026-2109HIGH8.1A vulnerability was identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file /api/...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now