2026 CVE Vulnerabilities
84,154 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25581 | MEDIUM | 5.4 | 0.2% | Feb 6, 2026 | SCEditor is a lightweight WYSIWYG BBCode and XHTML editor. Prior to 3.2.1, if an attacker has the ability control config... |
| CVE-2026-25580 | HIGH | 8.6 | 0.6% | Feb 6, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to befor... |
| CVE-2026-2065 | HIGH | 8.8 | 0.5% | Feb 6, 2026 | A security flaw has been discovered in Flycatcher Toys smART Pixelator 2.0. Affected by this issue is some unknown funct... |
| CVE-2026-2064 | MEDIUM | 5.4 | 0.2% | Feb 6, 2026 | A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functiona... |
| CVE-2026-25727 | MEDIUM | 6.5 | 0.3% | Feb 6, 2026 | time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any t... |
| CVE-2026-25643 | CRITICAL | 9.1 | 2.9% | Feb 6, 2026 | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.4, a critic... |
| CVE-2026-25642 | MEDIUM | 6.1 | 0.2% | Feb 6, 2026 | HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.6, files served below th... |
| CVE-2026-25641 | CRITICAL | 9 | 0.5% | Feb 6, 2026 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, there is a sandbox escape vulnerability due to a mismatch... |
| CVE-2026-25640 | MEDIUM | 5.4 | 0.3% | Feb 6, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 to befor... |
| CVE-2026-25587 | CRITICAL | 10 | 0.6% | Feb 6, 2026 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, as Map is in SAFE_PROTOYPES, it's prototype can be obtain... |
| CVE-2026-25586 | CRITICAL | 10 | 0.6% | Feb 6, 2026 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, a sandbox escape is possible by shadowing hasOwnProperty ... |
| CVE-2026-25520 | CRITICAL | 10 | 0.8% | Feb 6, 2026 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, The return values of functions aren't wrapped. Object.val... |
| CVE-2026-22254 | LOW | 3.5 | 0.3% | Feb 6, 2026 | Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Versions of Winter CMS... |
| CVE-2026-1709 | CRITICAL | 9.8 | 5.4% | Feb 6, 2026 | A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer S... |
| CVE-2026-2063 | HIGH | 7.2 | 4.0% | Feb 6, 2026 | A security flaw has been discovered in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /gofo... |
| CVE-2026-2062 | HIGH | 7.5 | 0.7% | Feb 6, 2026 | A vulnerability was identified in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_modify_bearer_response/... |
| CVE-2026-25753 | CRITICAL | 9.8 | 0.4% | Feb 6, 2026 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application uses a... |
| CVE-2026-25752 | CRITICAL | 9.1 | 0.5% | Feb 6, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An authorization bypass vulnerability in FUXA ... |
| CVE-2026-25751 | HIGH | 7.5 | 0.3% | Feb 6, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An information disclosure vulnerability in FUX... |
| CVE-2026-25651 | MEDIUM | 6.1 | 0.2% | Feb 6, 2026 | client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Vers... |
| CVE-2026-25650 | HIGH | 7.5 | 0.4% | Feb 6, 2026 | MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.... |
| CVE-2026-25647 | MEDIUM | 5.4 | 0.2% | Feb 6, 2026 | Lute is a structured Markdown engine supporting Go and JavaScript. Lute 1.7.6 and earlier (as used in SiYuan before) has... |
| CVE-2026-24418 | MEDIUM | 6.5 | 0.4% | Feb 6, 2026 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and e... |
| CVE-2026-24417 | MEDIUM | 6.5 | 0.4% | Feb 6, 2026 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and e... |
| CVE-2026-24416 | MEDIUM | 6.5 | 0.4% | Feb 6, 2026 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and e... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now