2026 CVE Vulnerabilities
85,030 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21870 | MEDIUM | 5.5 | 0.2% | Feb 13, 2026 | BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communicat... |
| CVE-2026-2026 | MEDIUM | 6.1 | 0.1% | Feb 13, 2026 | A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could all... |
| CVE-2026-26268 | CRITICAL | 9.9 | 0.5% | Feb 13, 2026 | Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in ver... |
| CVE-2026-26226 | MEDIUM | 5.3 | 0.7% | Feb 13, 2026 | beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to cross-site scripting... |
| CVE-2026-26221 | CRITICAL | 9.8 | 1.1% | Feb 13, 2026 | Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workf... |
| CVE-2026-25531 | MEDIUM | 4.3 | 0.2% | Feb 13, 2026 | Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is in... |
| CVE-2026-1578 | MEDIUM | 5.1 | 0.1% | Feb 13, 2026 | HP App for Android is potentially vulnerable to cross-site scripting (XSS) when using an outdated version of the applica... |
| CVE-2026-23112 | CRITICAL | 9.8 | 0.5% | Feb 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu... |
| CVE-2026-23111 | HIGH | 7.8 | 0.5% | Feb 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in... |
| CVE-2026-1619 | HIGH | 8.3 | 0.3% | Feb 13, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploita... |
| CVE-2026-1618 | HIGH | 8.8 | 0.4% | Feb 13, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows ... |
| CVE-2026-2443 | MEDIUM | 5.3 | 0.4% | Feb 13, 2026 | A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted H... |
| CVE-2026-22892 | MEDIUM | 4.3 | 0.2% | Feb 13, 2026 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to validate user permissions when creati... |
| CVE-2026-20796 | LOW | 3.1 | 0.2% | Feb 13, 2026 | Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of data retrieval which ... |
| CVE-2026-0872 | LOW | 2.5 | 0.2% | Feb 13, 2026 | Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoo... |
| CVE-2026-26257 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26256 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26255 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26254 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26253 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26252 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26251 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26250 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26249 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-25108 | HIGH | 8.8 | 5.0% | Feb 13, 2026 | FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now