2026 CVE Vulnerabilities
48,561 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21766 | MEDIUM | 5.4 | — | Aug 5, 2026 | The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. ... |
| CVE-2026-18958 | HIGH | 7.3 | 0.3% | Aug 5, 2026 | A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a... |
| CVE-2026-18954 | MEDIUM | 5.7 | 0.1% | Aug 5, 2026 | Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might al... |
| CVE-2026-18953 | HIGH | 8.8 | 0.1% | Aug 5, 2026 | Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp... |
| CVE-2026-17556 | CRITICAL | 9.1 | 0.5% | Aug 5, 2026 | A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to de... |
| CVE-2026-9205 | CRITICAL | 9.8 | 0.2% | Aug 5, 2026 | IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function. |
| CVE-2026-9201 | HIGH | 8.8 | 0.2% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptogra... |
| CVE-2026-9196 | HIGH | 8.8 | 0.2% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic As... |
| CVE-2026-9130 | HIGH | 7.1 | 0.2% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows a... |
| CVE-2026-8478 | HIGH | 8.8 | 0.4% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the i... |
| CVE-2026-8470 | CRITICAL | 9.1 | 0.1% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's... |
| CVE-2026-8183 | HIGH | 7.7 | 0.4% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1... |
| CVE-2026-8182 | HIGH | 8.8 | 0.4% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server... |
| CVE-2026-7869 | MEDIUM | 5.4 | 0.2% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledg... |
| CVE-2026-7658 | MEDIUM | 6.5 | 0.3% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path t... |
| CVE-2026-70612 | MEDIUM | 5.4 | — | Aug 5, 2026 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8,... |
| CVE-2026-63457 | MEDIUM | 6.5 | 0.2% | Aug 5, 2026 | A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78. |
| CVE-2026-48168 | CRITICAL | 10 | — | Aug 5, 2026 | PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub Actions workflow is vuln... |
| CVE-2026-18485 | HIGH | 8.5 | — | Aug 5, 2026 | There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a l... |
| CVE-2026-17633 | HIGH | 8.8 | 0.4% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code ... |
| CVE-2026-17632 | HIGH | 8.8 | 0.4% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to impro... |
| CVE-2026-17624 | HIGH | 8.8 | 0.3% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1... |
| CVE-2026-10547 | HIGH | 8.1 | 0.2% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/{flow_id... |
| CVE-2026-9081 | HIGH | 7.1 | 0.2% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerabil... |
| CVE-2026-7657 | MEDIUM | 6.5 | 0.2% | Aug 5, 2026 | IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and inef... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now