2026 CVE Vulnerabilities
85,185 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24676 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the a... |
| CVE-2026-24675 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, urb_select_interface can free the devi... |
| CVE-2026-24491 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, video_timer can send client notificati... |
| CVE-2026-23948 | HIGH | 7.5 | 0.5% | Feb 9, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerabili... |
| CVE-2026-2242 | MEDIUM | 6.1 | 0.2% | Feb 9, 2026 | A vulnerability was determined in janet-lang janet up to 1.40.1. This impacts the function janetc_if of the file src/cor... |
| CVE-2026-2241 | MEDIUM | 6.1 | 0.2% | Feb 9, 2026 | A vulnerability was found in janet-lang janet up to 1.40.1. This affects the function os_strftime of the file src/core/o... |
| CVE-2026-21419 | MEDIUM | 6.6 | 0.1% | Feb 9, 2026 | Dell Display and Peripheral Manager (Windows) versions prior to 2.2 contain an Improper Link Resolution Before File Acce... |
| CVE-2026-2240 | MEDIUM | 6.1 | 0.2% | Feb 9, 2026 | A vulnerability has been found in janet-lang janet up to 1.40.1. The impacted element is the function janetc_pop_funcdef... |
| CVE-2026-24095 | MEDIUM | 5.3 | 0.2% | Feb 9, 2026 | Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p21, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows... |
| CVE-2026-24027 | MEDIUM | 5.3 | 0.4% | Feb 9, 2026 | Crafted zones can lead to increased incoming network traffic. |
| CVE-2026-0398 | MEDIUM | 5.3 | 0.4% | Feb 9, 2026 | Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor. |
| CVE-2026-1960 | MEDIUM | 5.1 | 0.4% | Feb 9, 2026 | Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'Facebook' parameter in '/loggrodemo/jbrain/Con... |
| CVE-2026-1959 | MEDIUM | 5.1 | 0.4% | Feb 9, 2026 | Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes, via the 'descripción' parameter in the '/loggrodemo/... |
| CVE-2026-0632 | MEDIUM | 5.4 | 0.2% | Feb 9, 2026 | The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to... |
| CVE-2026-25848 | CRITICAL | 9.8 | 0.4% | Feb 9, 2026 | In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible |
| CVE-2026-25847 | MEDIUM | 6.1 | 0.2% | Feb 9, 2026 | In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible |
| CVE-2026-25846 | MEDIUM | 6.5 | 0.9% | Feb 9, 2026 | In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs |
| CVE-2026-24098 | MEDIUM | 6.5 | 0.8% | Feb 9, 2026 | Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or mo... |
| CVE-2026-22922 | MEDIUM | 6.5 | 0.4% | Feb 9, 2026 | Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with cust... |
| CVE-2026-2227 | HIGH | 7.2 | 5.4% | Feb 9, 2026 | A vulnerability was found in D-Link DCS-931L up to 1.13.0. Impacted is the function doSystem of the file /setSystemAdmin... |
| CVE-2026-2226 | HIGH | 7.2 | 0.4% | Feb 9, 2026 | A vulnerability has been found in DouPHP up to 1.9. This issue affects some unknown processing of the file /admin/file.p... |
| CVE-2026-23903 | MEDIUM | 5.3 | 0.4% | Feb 9, 2026 | Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro: before 2.0.7. ... |
| CVE-2026-2225 | CRITICAL | 9.8 | 0.4% | Feb 9, 2026 | A flaw has been found in itsourcecode News Portal Project 1.0. This vulnerability affects unknown code of the file /admi... |
| CVE-2026-2224 | MEDIUM | 5.4 | 0.2% | Feb 9, 2026 | A vulnerability was detected in code-projects Online Reviewer System 1.0. This affects an unknown part of the file /syst... |
| CVE-2026-25916 | MEDIUM | 4.3 | 0.6% | Feb 9, 2026 | Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now