2026 CVE Vulnerabilities
85,047 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23111 | HIGH | 7.8 | 0.5% | Feb 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in... |
| CVE-2026-1619 | HIGH | 8.3 | 0.3% | Feb 13, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploita... |
| CVE-2026-1618 | HIGH | 8.8 | 0.4% | Feb 13, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows ... |
| CVE-2026-2443 | MEDIUM | 5.3 | 0.4% | Feb 13, 2026 | A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted H... |
| CVE-2026-22892 | MEDIUM | 4.3 | 0.2% | Feb 13, 2026 | Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to validate user permissions when creati... |
| CVE-2026-20796 | LOW | 3.1 | 0.2% | Feb 13, 2026 | Mattermost versions 10.11.x <= 10.11.9 fail to properly validate channel membership at the time of data retrieval which ... |
| CVE-2026-0872 | LOW | 2.5 | 0.2% | Feb 13, 2026 | Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon on Windows allows Signature Spoo... |
| CVE-2026-26257 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26256 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26255 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26254 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26253 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26252 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26251 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26250 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-26249 | — | — | — | Feb 13, 2026 | Rejected reason: Not used |
| CVE-2026-25108 | HIGH | 8.8 | 5.0% | Feb 13, 2026 | FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user... |
| CVE-2026-1721 | MEDIUM | 6.2 | 0.4% | Feb 13, 2026 | Summary A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth callback handl... |
| CVE-2026-26188 | MEDIUM | 5.4 | 0.3% | Feb 12, 2026 | Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. An authenticated, low-privilege user ... |
| CVE-2026-26225 | HIGH | 8.5 | 0.2% | Feb 12, 2026 | Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones,... |
| CVE-2026-26224 | HIGH | 8.5 | 0.1% | Feb 12, 2026 | Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and applicati... |
| CVE-2026-26185 | MEDIUM | 5.3 | 0.3% | Feb 12, 2026 | Directus is a real-time API and App dashboard for managing SQL database content. Before 11.14.1, a timing-based user enu... |
| CVE-2026-26076 | HIGH | 7.5 | 0.3% | Feb 12, 2026 | ntpd-rs is a full-featured implementation of the Network Time Protocol. Prior to 1.7.1, an attacker can remotely induce ... |
| CVE-2026-26075 | MEDIUM | 5.4 | 0.1% | Feb 12, 2026 | FastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. ne... |
| CVE-2026-26069 | HIGH | 7.5 | 0.3% | Feb 12, 2026 | Scraparr is a Prometheus Exporter for various components of the *arr Suite. From 3.0.0-beta to before 3.0.2, when the Re... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now