2026 CVE Vulnerabilities
85,185 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25905 | MEDIUM | 5.8 | 0.2% | Feb 9, 2026 | The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any ... |
| CVE-2026-25904 | MEDIUM | 5.8 | 0.2% | Feb 9, 2026 | The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the ... |
| CVE-2026-2236 | HIGH | 8.7 | 0.4% | Feb 9, 2026 | C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbit... |
| CVE-2026-2235 | HIGH | 7.1 | 0.3% | Feb 9, 2026 | C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrar... |
| CVE-2026-2234 | CRITICAL | 9.3 | 0.4% | Feb 9, 2026 | C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to rea... |
| CVE-2026-2223 | CRITICAL | 9.8 | 0.4% | Feb 9, 2026 | A security vulnerability has been detected in code-projects Online Reviewer System 1.0. Affected by this issue is some u... |
| CVE-2026-2222 | MEDIUM | 4.8 | 0.2% | Feb 9, 2026 | A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown... |
| CVE-2026-22906 | CRITICAL | 9.8 | 0.3% | Feb 9, 2026 | User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining ... |
| CVE-2026-22905 | HIGH | 7.5 | 0.6% | Feb 9, 2026 | An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path tr... |
| CVE-2026-22904 | CRITICAL | 9.8 | 0.5% | Feb 9, 2026 | Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attack... |
| CVE-2026-22903 | CRITICAL | 9.8 | 0.7% | Feb 9, 2026 | An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can ... |
| CVE-2026-2221 | CRITICAL | 9.8 | 0.3% | Feb 9, 2026 | A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the ... |
| CVE-2026-2220 | CRITICAL | 9.8 | 0.3% | Feb 9, 2026 | A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file... |
| CVE-2026-24466 | HIGH | 8.4 | 0.1% | Feb 9, 2026 | Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) regi... |
| CVE-2026-1868 | CRITICAL | 9.9 | 0.5% | Feb 9, 2026 | GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions ... |
| CVE-2026-0870 | HIGH | 8.5 | 0.1% | Feb 9, 2026 | MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching... |
| CVE-2026-2218 | HIGH | 8.8 | 3.5% | Feb 9, 2026 | A vulnerability was determined in D-Link DCS-933L up to 1.14.11. This affects an unknown function of the file /setSystem... |
| CVE-2026-2217 | CRITICAL | 9.8 | 0.3% | Feb 9, 2026 | A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of th... |
| CVE-2026-2216 | MEDIUM | 4.3 | 0.3% | Feb 9, 2026 | A flaw has been found in rachelos WeRSS we-mp-rss up to 1.4.8. Impacted is the function download_export_file of the file... |
| CVE-2026-22613 | MEDIUM | 5.7 | 0.2% | Feb 9, 2026 | The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potential... |
| CVE-2026-2215 | LOW | 3.7 | 0.3% | Feb 9, 2026 | A vulnerability was detected in rachelos WeRSS we-mp-rss up to 1.4.8. This issue affects some unknown processing of the ... |
| CVE-2026-2214 | MEDIUM | 4.8 | 0.2% | Feb 9, 2026 | A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/... |
| CVE-2026-2213 | HIGH | 7.2 | 0.3% | Feb 9, 2026 | A security flaw has been discovered in code-projects Online Music Site 1.0. Affected by this issue is some unknown funct... |
| CVE-2026-1615 | CRITICAL | 9.8 | 1.0% | Feb 9, 2026 | Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-s... |
| CVE-2026-2212 | CRITICAL | 9.8 | 0.3% | Feb 9, 2026 | A vulnerability was identified in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown func... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now