2026 CVE Vulnerabilities
85,118 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1841 | HIGH | 7.2 | 0.3% | Feb 13, 2026 | The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripti... |
| CVE-2026-26335 | CRITICAL | 9.8 | 2.8% | Feb 13, 2026 | Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web app... |
| CVE-2026-26334 | HIGH | 7.8 | 0.1% | Feb 13, 2026 | Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (V... |
| CVE-2026-26333 | CRITICAL | 9.8 | 0.9% | Feb 13, 2026 | Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The se... |
| CVE-2026-26269 | HIGH | 7.5 | 0.3% | Feb 13, 2026 | Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim'... |
| CVE-2026-2441 | HIGH | 8.8 | 22.0% | Feb 13, 2026 | Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-26264 | HIGH | 8.1 | 0.4% | Feb 13, 2026 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a ma... |
| CVE-2026-26208 | HIGH | 7.8 | 0.2% | Feb 13, 2026 | ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserial... |
| CVE-2026-26190 | CRITICAL | 9.8 | 27.7% | Feb 13, 2026 | Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus expose... |
| CVE-2026-26187 | HIGH | 8.1 | 0.4% | Feb 13, 2026 | lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to 1.77.0, the local bl... |
| CVE-2026-25991 | HIGH | 7.7 | 0.3% | Feb 13, 2026 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, the... |
| CVE-2026-25964 | MEDIUM | 4.9 | 0.4% | Feb 13, 2026 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, a P... |
| CVE-2026-21878 | HIGH | 7.5 | 0.4% | Feb 13, 2026 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability ... |
| CVE-2026-21870 | MEDIUM | 5.5 | 0.2% | Feb 13, 2026 | BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communicat... |
| CVE-2026-2026 | MEDIUM | 6.1 | 0.1% | Feb 13, 2026 | A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could all... |
| CVE-2026-26268 | CRITICAL | 9.9 | 0.5% | Feb 13, 2026 | Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in ver... |
| CVE-2026-26226 | MEDIUM | 5.3 | 0.7% | Feb 13, 2026 | beautiful-mermaid versions prior to 0.1.3 contain an SVG attribute injection issue that can lead to cross-site scripting... |
| CVE-2026-26221 | CRITICAL | 9.8 | 1.1% | Feb 13, 2026 | Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workf... |
| CVE-2026-25531 | MEDIUM | 4.3 | 0.2% | Feb 13, 2026 | Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is in... |
| CVE-2026-1578 | MEDIUM | 5.1 | 0.1% | Feb 13, 2026 | HP App for Android is potentially vulnerable to cross-site scripting (XSS) when using an outdated version of the applica... |
| CVE-2026-23112 | CRITICAL | 9.8 | 0.5% | Feb 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu... |
| CVE-2026-23111 | HIGH | 7.8 | 0.5% | Feb 13, 2026 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix inverted genmask check in... |
| CVE-2026-1619 | HIGH | 8.3 | 0.3% | Feb 13, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploita... |
| CVE-2026-1618 | HIGH | 8.8 | 0.4% | Feb 13, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc. FlexCity/Kiosk allows ... |
| CVE-2026-2443 | MEDIUM | 5.3 | 0.4% | Feb 13, 2026 | A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted H... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now