2026 CVE Vulnerabilities

85,185 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-2208MEDIUM6.5A security vulnerability has been detected in WeKan up to 8.20. Impacted is an unknown function of the file server/publi...
CVE-2026-2207MEDIUM6.9A weakness has been identified in WeKan up to 8.20. This issue affects some unknown processing of the file server/public...
CVE-2026-2206HIGH8.8A security flaw has been discovered in WeKan up to 8.20. This vulnerability affects unknown code of the file server/meth...
CVE-2026-2205MEDIUM5.3A vulnerability was identified in WeKan up to 8.20. This affects an unknown part of the file server/publications/cards.j...
CVE-2026-2129HIGH7.3A vulnerability was found in D-Link DIR-823X 250416. Affected by this issue is some unknown functionality of the file /g...
CVE-2026-2122CRITICAL9.8A security flaw has been discovered in Xiaopi Panel up to 20260126. This impacts an unknown function of the file /demo.p...
CVE-2026-2120HIGH7.3A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/set_serve...
CVE-2026-2118HIGH7.3A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub_4407D4 of the fil...
CVE-2026-2117CRITICAL9.8A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of ...
CVE-2026-2116CRITICAL9.8A vulnerability has been found in itsourcecode Society Management System 1.0. Impacted is an unknown function of the fil...
CVE-2026-2115CRITICAL9.8A flaw has been found in itsourcecode Society Management System 1.0. This issue affects some unknown processing of the f...
CVE-2026-2114CRITICAL9.8A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of t...
CVE-2026-25859HIGH8.8Wekan versions prior to 8.20 allow non-administrative users to access migration functionality due to insufficient permis...
CVE-2026-25858CRITICAL9.3macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workf...
CVE-2026-25857HIGH8.8Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagn...
CVE-2026-25568MEDIUM4.3WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allow...
CVE-2026-25567MEDIUM4.3WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in the card comment creation API. The en...
CVE-2026-25566MEDIUM5.4WeKan versions prior to 8.19 contain an authorization vulnerability in card move logic. A user can specify a destination...
CVE-2026-25565MEDIUM6.5WeKan versions prior to 8.19 contain an authorization vulnerability where certain card update API paths validate only bo...
CVE-2026-25564HIGH7.5WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checkl...
CVE-2026-25563HIGH7.5WeKan versions prior to 8.19 contain an insecure direct object reference (IDOR) in checklist creation and related checkl...
CVE-2026-25562MEDIUM4.3WeKan versions prior to 8.19 contain an information disclosure vulnerability in the attachments publication. Attachment ...
CVE-2026-25561HIGH7.5WeKan versions prior to 8.19 contain an authorization weakness in the attachment upload API. The API does not fully vali...
CVE-2026-25560CRITICAL9.8WeKan versions prior to 8.19 contain an LDAP filter injection vulnerability in LDAP authentication. User-supplied userna...
CVE-2026-2113CRITICAL9.8A security vulnerability has been detected in yuan1994 tpadmin up to 1.3.12. This affects an unknown part in the library...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now