2026 CVE Vulnerabilities
85,180 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2258 | MEDIUM | 5.5 | 0.2% | Feb 10, 2026 | A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the function WaveFunctionColl... |
| CVE-2026-0845 | HIGH | 7.2 | 0.4% | Feb 10, 2026 | The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is... |
| CVE-2026-25958 | HIGH | 7.7 | 0.4% | Feb 9, 2026 | Cube is a semantic layer for building data applications. From 0.27.19 to before 1.5.13, 1.4.2, and 1.0.14, it is possibl... |
| CVE-2026-25957 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make ... |
| CVE-2026-25951 | HIGH | 7.2 | 1.2% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.11, there is a flaw in the path s... |
| CVE-2026-25939 | CRITICAL | 9.1 | 12.0% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authori... |
| CVE-2026-25938 | CRITICAL | 9.8 | 1.0% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication b... |
| CVE-2026-25934 | MEDIUM | 4.3 | 0.1% | Feb 9, 2026 | go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discov... |
| CVE-2026-25931 | HIGH | 7.8 | 0.1% | Feb 9, 2026 | vscode-spell-checker is a basic spell checker that works well with code and documents. Prior to v4.5.4, DocumentSettings... |
| CVE-2026-25895 | CRITICAL | 9.8 | 2.7% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. A path traversal vulnerability in FUXA allows ... |
| CVE-2026-25894 | CRITICAL | 9.8 | 0.8% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An insecure default configuration in FUXA allo... |
| CVE-2026-25893 | CRITICAL | 9.8 | 0.7% | Feb 9, 2026 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.10, an authentication bypass vuln... |
| CVE-2026-25961 | HIGH | 7.5 | 0.4% | Feb 9, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS host... |
| CVE-2026-25925 | HIGH | 7.8 | 0.3% | Feb 9, 2026 | PowerDocu contains a Windows GUI executable to perform technical documentations. Prior to 2.4.0, PowerDocu contains a cr... |
| CVE-2026-25923 | CRITICAL | 9.1 | 0.4% | Feb 9, 2026 | my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to ... |
| CVE-2026-25920 | MEDIUM | 5.5 | 0.2% | Feb 9, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in... |
| CVE-2026-25918 | MEDIUM | 5.5 | 0.1% | Feb 9, 2026 | unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-agains... |
| CVE-2026-25892 | HIGH | 7.5 | 1.6% | Feb 9, 2026 | Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where admi... |
| CVE-2026-25890 | HIGH | 8.1 | 0.5% | Feb 9, 2026 | File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ... |
| CVE-2026-25889 | MEDIUM | 5.4 | 0.3% | Feb 9, 2026 | File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ... |
| CVE-2026-25885 | HIGH | 7.5 | 0.3% | Feb 9, 2026 | PolarLearn is a free and open-source learning program. In 0-PRERELEASE-16 and earlier, the group chat WebSocket at wss:/... |
| CVE-2026-25881 | CRITICAL | 10 | 0.6% | Feb 9, 2026 | SandboxJS is a JavaScript sandboxing library. Prior to 0.8.31, a sandbox escape vulnerability allows sandboxed code to m... |
| CVE-2026-25880 | HIGH | 7.8 | 0.2% | Feb 9, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious bi... |
| CVE-2026-25875 | CRITICAL | 9.8 | 0.3% | Feb 9, 2026 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The admin authorizatio... |
| CVE-2026-25814 | CRITICAL | 9.8 | 0.3% | Feb 9, 2026 | PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now