2026 CVE Vulnerabilities
85,180 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23715 | HIGH | 7.3 | 0.2% | Feb 10, 2026 | A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512).... |
| CVE-2026-22923 | HIGH | 7.8 | 0.1% | Feb 10, 2026 | A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected... |
| CVE-2026-1922 | MEDIUM | 6.4 | 0.2% | Feb 10, 2026 | The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug... |
| CVE-2026-1866 | HIGH | 7.2 | 0.3% | Feb 10, 2026 | The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in ... |
| CVE-2026-1722 | MEDIUM | 5.3 | 0.3% | Feb 10, 2026 | The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Obj... |
| CVE-2026-2099 | MEDIUM | 5.4 | 0.2% | Feb 10, 2026 | AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers... |
| CVE-2026-2098 | MEDIUM | 6.1 | 0.2% | Feb 10, 2026 | AgentFlow developed by Flowring has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote atta... |
| CVE-2026-2097 | HIGH | 8.8 | 0.4% | Feb 10, 2026 | Agentflow developed by Flowring has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to u... |
| CVE-2026-2096 | CRITICAL | 9.8 | 0.5% | Feb 10, 2026 | Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to... |
| CVE-2026-2095 | CRITICAL | 9.8 | 0.5% | Feb 10, 2026 | Agentflow developed by Flowring has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to... |
| CVE-2026-2094 | HIGH | 8.8 | 0.3% | Feb 10, 2026 | Docpedia developed by Flowring has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbi... |
| CVE-2026-2093 | HIGH | 8.7 | 0.5% | Feb 10, 2026 | Docpedia developed by Flowring has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject ar... |
| CVE-2026-0996 | MEDIUM | 6.4 | 0.3% | Feb 10, 2026 | The Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AI Form Builder module in all... |
| CVE-2026-25981 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25980 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25979 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25978 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25977 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25976 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25975 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25974 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-25973 | — | — | — | Feb 10, 2026 | Rejected reason: Not used |
| CVE-2026-2260 | HIGH | 7.3 | 5.0% | Feb 10, 2026 | A vulnerability was found in D-Link DCS-931L up to 1.13.0. This affects an unknown part of the file /goform/setSysAdmin.... |
| CVE-2026-2259 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | A vulnerability has been found in aardappel lobster up to 2025.4. Affected by this issue is the function lobster::Parser... |
| CVE-2026-24328 | MEDIUM | 6.1 | 0.2% | Feb 10, 2026 | SAP TAF_APPLAUNCHER within Business Server Pages allows unauthenticated attacker to craft malicious links that, when cli... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now