2026 CVE Vulnerabilities
85,185 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25651 | MEDIUM | 6.1 | 0.2% | Feb 6, 2026 | client-certificate-auth is middleware for Node.js implementing client SSL certificate authentication/authorization. Vers... |
| CVE-2026-25650 | HIGH | 7.5 | 0.4% | Feb 6, 2026 | MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.... |
| CVE-2026-25647 | MEDIUM | 5.4 | 0.2% | Feb 6, 2026 | Lute is a structured Markdown engine supporting Go and JavaScript. Lute 1.7.6 and earlier (as used in SiYuan before) has... |
| CVE-2026-24418 | MEDIUM | 6.5 | 0.4% | Feb 6, 2026 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and e... |
| CVE-2026-24417 | MEDIUM | 6.5 | 0.4% | Feb 6, 2026 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and e... |
| CVE-2026-24416 | MEDIUM | 6.5 | 0.4% | Feb 6, 2026 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and e... |
| CVE-2026-24050 | MEDIUM | 5.4 | 0.2% | Feb 6, 2026 | Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actions on the user profil... |
| CVE-2026-23989 | HIGH | 8.1 | 0.3% | Feb 6, 2026 | REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Rev... |
| CVE-2026-2061 | HIGH | 7.2 | 3.9% | Feb 6, 2026 | A vulnerability was determined in D-Link DIR-823X 250416. Affected by this issue is the function sub_424D20 of the file ... |
| CVE-2026-2060 | CRITICAL | 9.8 | 0.3% | Feb 6, 2026 | A vulnerability was found in code-projects Simple Blood Donor Management System 1.0. Affected by this vulnerability is a... |
| CVE-2026-25725 | CRITICAL | 10 | 0.4% | Feb 6, 2026 | Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to p... |
| CVE-2026-25724 | HIGH | 7.5 | 0.4% | Feb 6, 2026 | Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configu... |
| CVE-2026-25723 | MEDIUM | 6.5 | 0.3% | Feb 6, 2026 | Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using p... |
| CVE-2026-25722 | CRITICAL | 9.1 | 0.4% | Feb 6, 2026 | Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory change... |
| CVE-2026-24903 | MEDIUM | 5.4 | 0.2% | Feb 6, 2026 | OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was d... |
| CVE-2026-24851 | HIGH | 8.8 | 0.3% | Feb 6, 2026 | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Z... |
| CVE-2026-24776 | MEDIUM | 4.3 | 0.2% | Feb 6, 2026 | OpenProject is an open-source, web-based project management software. Prior to 17.0.2, the drag&drop handler moving an a... |
| CVE-2026-24419 | MEDIUM | 6.5 | 0.3% | Feb 6, 2026 | OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and e... |
| CVE-2026-24135 | HIGH | 8.1 | 0.7% | Feb 6, 2026 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, a path traversal vulnerability exists in th... |
| CVE-2026-23633 | MEDIUM | 6.5 | 0.5% | Feb 6, 2026 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, there is an arbitrary file read/write via p... |
| CVE-2026-23632 | MEDIUM | 6.5 | 0.3% | Feb 6, 2026 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, the endpoint "PUT /repos/:owner/:repo/conte... |
| CVE-2026-22592 | MEDIUM | 6.5 | 0.3% | Feb 6, 2026 | Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, an authenticated user can cause a DOS attac... |
| CVE-2026-1769 | MEDIUM | 5.4 | 0.1% | Feb 6, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xerox Centr... |
| CVE-2026-2103 | HIGH | 7.8 | 0.1% | Feb 6, 2026 | Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, da... |
| CVE-2026-2059 | CRITICAL | 9.8 | 0.4% | Feb 6, 2026 | A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown fun... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now