2026 CVE Vulnerabilities

84,162 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-2103HIGH7.8Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, da...
CVE-2026-2059CRITICAL9.8A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown fun...
CVE-2026-2058CRITICAL9.8A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This im...
CVE-2026-25556HIGH7.5MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an e...
CVE-2026-23741HIGH8.8Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1...
CVE-2026-23740HIGH7.8Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1...
CVE-2026-23739MEDIUM6.5Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1...
CVE-2026-23738MEDIUM6.1Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1...
CVE-2026-2057CRITICAL9.8A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown func...
CVE-2026-2056HIGH7.5A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an u...
CVE-2026-1337MEDIUM5.4Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can...
CVE-2026-2055HIGH7.5A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown funct...
CVE-2026-2054HIGH7.5A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. Impacted is an unknown function of ...
CVE-2026-2018CRITICAL9.8A flaw has been found in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/s...
CVE-2026-2017CRITICAL9.8A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurity...
CVE-2026-2016HIGH7.8A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is...
CVE-2026-1293MEDIUM6.4The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-...
CVE-2026-2015HIGH8.8A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatu...
CVE-2026-2014CRITICAL9.8A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of t...
CVE-2026-2013CRITICAL9.8A vulnerability was identified in itsourcecode Student Management System 1.0. This affects an unknown function of the fi...
CVE-2026-24928MEDIUM5.5Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may a...
CVE-2026-24927MEDIUM5.5Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerabi...
CVE-2026-24924MEDIUM5.5Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability ...
CVE-2026-24920MEDIUM5.5Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect ava...
CVE-2026-2012CRITICAL9.8A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown functio...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now