2026 CVE Vulnerabilities

85,180 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-26006MEDIUM6.5AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut...
CVE-2026-1507HIGH8.7The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely c...
CVE-2026-1495MEDIUM6.5The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy...
CVE-2026-2303MEDIUM6.9The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrap...
CVE-2026-21349HIGH7.8Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in ar...
CVE-2026-21348MEDIUM5.5Substance3D - Modeler versions 1.22.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to...
CVE-2026-1763MEDIUM4.6Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions.
CVE-2026-1762LOW2.9A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 a...
CVE-2026-2302MEDIUM6.9Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may al...
CVE-2026-26009CRITICAL9.9Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install...
CVE-2026-25613HIGH7.1An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compo...
CVE-2026-25610HIGH7.1An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.
CVE-2026-25609MEDIUM4.3Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read...
CVE-2026-25506HIGH7.8MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can ...
CVE-2026-21355MEDIUM5.5DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory ex...
CVE-2026-21354MEDIUM5.5DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead ...
CVE-2026-21353HIGH7.8DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could resul...
CVE-2026-21352HIGH7.8DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitr...
CVE-2026-21347HIGH7.8Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could re...
CVE-2026-21346HIGH7.8Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arb...
CVE-2026-21345HIGH7.8Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft...
CVE-2026-21344HIGH7.8Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft...
CVE-2026-21343HIGH7.8Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft...
CVE-2026-21342HIGH7.8Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result i...
CVE-2026-21341HIGH7.8Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result i...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now