2026 CVE Vulnerabilities
84,245 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25123 | MEDIUM | 5.3 | 0.3% | Feb 6, 2026 | Homarr is an open-source dashboard. Prior to 1.52.0, a public (unauthenticated) tRPC endpoint widget.app.ping accepts an... |
| CVE-2026-1731 | CRITICAL | 9.8 | 86.1% | Feb 6, 2026 | BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-auth... |
| CVE-2026-1727 | CRITICAL | 9.1 | 0.3% | Feb 6, 2026 | The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable ... |
| CVE-2026-2067 | HIGH | 8.8 | 0.8% | Feb 6, 2026 | A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy o... |
| CVE-2026-2066 | HIGH | 8.8 | 0.7% | Feb 6, 2026 | A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpG... |
| CVE-2026-25731 | HIGH | 7.8 | 0.2% | Feb 6, 2026 | calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templit... |
| CVE-2026-25729 | MEDIUM | 6.5 | 0.2% | Feb 6, 2026 | DeepAudit is a multi-agent system for code vulnerability discovery. In 3.0.4 and earlier, there is an improper access co... |
| CVE-2026-25636 | HIGH | 7.8 | 0.2% | Feb 6, 2026 | calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a... |
| CVE-2026-25635 | HIGH | 8.6 | 0.4% | Feb 6, 2026 | calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows a... |
| CVE-2026-25634 | HIGH | 7.8 | 0.2% | Feb 6, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color ... |
| CVE-2026-25632 | CRITICAL | 10 | 0.7% | Feb 6, 2026 | EPyT-Flow is a Python package designed for the easy generation of hydraulic and water quality scenario data of water dis... |
| CVE-2026-25631 | MEDIUM | 6.5 | 0.3% | Feb 6, 2026 | n8n is an open source workflow automation platform. Prior to 1.121.0, there is a vulnerability in the HTTP Request node'... |
| CVE-2026-25628 | HIGH | 8.8 | 0.5% | Feb 6, 2026 | Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append t... |
| CVE-2026-25597 | MEDIUM | 5.3 | 0.3% | Feb 6, 2026 | PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3, there is a time-based user enumeratio... |
| CVE-2026-25593 | HIGH | 8.4 | 0.6% | Feb 6, 2026 | OpenClaw is a personal AI assistant. Prior to 2026.1.20, an unauthenticated local client could use the Gateway WebSocket... |
| CVE-2026-25592 | CRITICAL | 9.9 | 1.9% | Feb 6, 2026 | Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.71.0, an ... |
| CVE-2026-25581 | MEDIUM | 5.4 | 0.2% | Feb 6, 2026 | SCEditor is a lightweight WYSIWYG BBCode and XHTML editor. Prior to 3.2.1, if an attacker has the ability control config... |
| CVE-2026-25580 | HIGH | 8.6 | 0.6% | Feb 6, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to befor... |
| CVE-2026-2065 | HIGH | 8.8 | 0.5% | Feb 6, 2026 | A security flaw has been discovered in Flycatcher Toys smART Pixelator 2.0. Affected by this issue is some unknown funct... |
| CVE-2026-2064 | MEDIUM | 5.4 | 0.2% | Feb 6, 2026 | A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functiona... |
| CVE-2026-25727 | MEDIUM | 6.5 | 0.3% | Feb 6, 2026 | time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any t... |
| CVE-2026-25643 | CRITICAL | 9.1 | 2.9% | Feb 6, 2026 | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.4, a critic... |
| CVE-2026-25642 | MEDIUM | 6.1 | 0.2% | Feb 6, 2026 | HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.6, files served below th... |
| CVE-2026-25641 | CRITICAL | 9 | 0.5% | Feb 6, 2026 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, there is a sandbox escape vulnerability due to a mismatch... |
| CVE-2026-25640 | MEDIUM | 5.4 | 0.3% | Feb 6, 2026 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 to befor... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now