2026 CVE Vulnerabilities
84,135 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25757 | MEDIUM | 5.3 | 0.4% | Feb 6, 2026 | Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 5.0.8, 5.1.10, 5.2.7, and 5.3.2,... |
| CVE-2026-25754 | HIGH | 7.2 | 0.4% | Feb 6, 2026 | AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a prototype pollution vulnerab... |
| CVE-2026-25749 | MEDIUM | 6.6 | 0.2% | Feb 6, 2026 | Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists ... |
| CVE-2026-25644 | HIGH | 7.5 | 0.3% | Feb 6, 2026 | DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM a... |
| CVE-2026-2069 | LOW | 3.3 | 0.1% | Feb 6, 2026 | A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llama_grammar_advance_stack of the f... |
| CVE-2026-2068 | HIGH | 8.8 | 0.7% | Feb 6, 2026 | A vulnerability was detected in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/for... |
| CVE-2026-25764 | LOW | 3.5 | 0.2% | Feb 6, 2026 | OpenProject is an open-source, web-based project management software. Prior to versions 16.6.7 and 17.0.3, an HTML injec... |
| CVE-2026-25763 | CRITICAL | 9.9 | 0.5% | Feb 6, 2026 | OpenProject is an open-source, web-based project management software. Prior to versions 16.6.7 and 17.0.3, an arbitrary ... |
| CVE-2026-25760 | MEDIUM | 6.5 | 0.5% | Feb 6, 2026 | Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.6.11, a path traversal in th... |
| CVE-2026-25758 | HIGH | 7.5 | 0.6% | Feb 6, 2026 | Spree is an open source e-commerce solution built with Ruby on Rails. A critical IDOR vulnerability exists in Spree Comm... |
| CVE-2026-25732 | HIGH | 7.5 | 3.2% | Feb 6, 2026 | NiceGUI is a Python-based UI framework. Prior to 3.7.0, NiceGUI's FileUpload.name property exposes client-supplied filen... |
| CVE-2026-25574 | MEDIUM | 5.4 | 0.2% | Feb 6, 2026 | Payload is a free and open source headless content management system. Prior to 3.74.0, a cross-collection Insecure Direc... |
| CVE-2026-25544 | CRITICAL | 9.8 | 0.5% | Feb 6, 2026 | Payload is a free and open source headless content management system. Prior to 3.73.0, when querying JSON or richText fi... |
| CVE-2026-25533 | HIGH | 8.8 | 0.2% | Feb 6, 2026 | Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers o... |
| CVE-2026-25516 | MEDIUM | 6.1 | 0.2% | Feb 6, 2026 | NiceGUI is a Python-based UI framework. The ui.markdown() component uses the markdown2 library to convert markdown conte... |
| CVE-2026-25123 | MEDIUM | 5.3 | 0.3% | Feb 6, 2026 | Homarr is an open-source dashboard. Prior to 1.52.0, a public (unauthenticated) tRPC endpoint widget.app.ping accepts an... |
| CVE-2026-1731 | CRITICAL | 9.8 | 86.1% | Feb 6, 2026 | BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-auth... |
| CVE-2026-1727 | CRITICAL | 9.1 | 0.3% | Feb 6, 2026 | The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable ... |
| CVE-2026-2067 | HIGH | 8.8 | 0.8% | Feb 6, 2026 | A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy o... |
| CVE-2026-2066 | HIGH | 8.8 | 0.7% | Feb 6, 2026 | A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpG... |
| CVE-2026-25731 | HIGH | 7.8 | 0.2% | Feb 6, 2026 | calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templit... |
| CVE-2026-25729 | MEDIUM | 6.5 | 0.2% | Feb 6, 2026 | DeepAudit is a multi-agent system for code vulnerability discovery. In 3.0.4 and earlier, there is an improper access co... |
| CVE-2026-25636 | HIGH | 7.8 | 0.2% | Feb 6, 2026 | calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a... |
| CVE-2026-25635 | HIGH | 8.6 | 0.4% | Feb 6, 2026 | calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows a... |
| CVE-2026-25634 | HIGH | 7.8 | 0.2% | Feb 6, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now