2026 CVE Vulnerabilities
84,108 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1082 | MEDIUM | 4.3 | 0.2% | Feb 7, 2026 | The TITLE ANIMATOR plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including... |
| CVE-2026-0555 | MEDIUM | 6.4 | 0.2% | Feb 7, 2026 | The Premmerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premmerce_wizard_actions' AJAX ... |
| CVE-2026-2078 | HIGH | 8.8 | 0.3% | Feb 7, 2026 | A vulnerability was detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the functi... |
| CVE-2026-2077 | HIGH | 8.8 | 0.3% | Feb 7, 2026 | A security vulnerability has been detected in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected ... |
| CVE-2026-2076 | HIGH | 8.8 | 0.3% | Feb 7, 2026 | A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this vuln... |
| CVE-2026-2075 | HIGH | 8.8 | 0.3% | Feb 7, 2026 | A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected is the ... |
| CVE-2026-2074 | MEDIUM | 6.3 | 0.3% | Feb 7, 2026 | A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs... |
| CVE-2026-2073 | CRITICAL | 9.8 | 0.3% | Feb 7, 2026 | A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the fil... |
| CVE-2026-25845 | — | — | — | Feb 7, 2026 | Rejected reason: Not used |
| CVE-2026-25844 | — | — | — | Feb 7, 2026 | Rejected reason: Not used |
| CVE-2026-25843 | — | — | — | Feb 7, 2026 | Rejected reason: Not used |
| CVE-2026-25842 | — | — | — | Feb 7, 2026 | Rejected reason: Not used |
| CVE-2026-25841 | — | — | — | Feb 7, 2026 | Rejected reason: Not used |
| CVE-2026-25840 | — | — | — | Feb 7, 2026 | Rejected reason: Not used |
| CVE-2026-25839 | — | — | — | Feb 7, 2026 | Rejected reason: Not used |
| CVE-2026-25838 | — | — | — | Feb 7, 2026 | Rejected reason: Not used |
| CVE-2026-25837 | — | — | — | Feb 7, 2026 | Rejected reason: Not used |
| CVE-2026-2071 | HIGH | 8.8 | 0.7% | Feb 7, 2026 | A vulnerability was found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/f... |
| CVE-2026-2070 | HIGH | 8.8 | 0.7% | Feb 6, 2026 | A vulnerability has been found in UTT 进取 520W 1.7.7-180627. The affected element is the function strcpy of the file /gof... |
| CVE-2026-25804 | CRITICAL | 9.1 | 0.4% | Feb 6, 2026 | Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's... |
| CVE-2026-25803 | CRITICAL | 9.8 | 0.4% | Feb 6, 2026 | 3DP-MANAGER is an inbound generator for 3x-ui. In version 2.0.1 and prior, the application automatically creates an admi... |
| CVE-2026-25793 | HIGH | 8.1 | 0.1% | Feb 6, 2026 | Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is n... |
| CVE-2026-25762 | HIGH | 7.5 | 0.5% | Feb 6, 2026 | AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a denial of service (DoS) vuln... |
| CVE-2026-25757 | MEDIUM | 5.3 | 0.4% | Feb 6, 2026 | Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 5.0.8, 5.1.10, 5.2.7, and 5.3.2,... |
| CVE-2026-25754 | HIGH | 7.2 | 0.4% | Feb 6, 2026 | AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a prototype pollution vulnerab... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now