2026 CVE Vulnerabilities

85,185 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-2058CRITICAL9.8A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This im...
CVE-2026-25556HIGH7.5MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an e...
CVE-2026-23741HIGH8.8Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1...
CVE-2026-23740HIGH7.8Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1...
CVE-2026-23739MEDIUM6.5Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1...
CVE-2026-23738MEDIUM6.1Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1...
CVE-2026-2057CRITICAL9.8A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown func...
CVE-2026-2056HIGH7.5A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an u...
CVE-2026-1337MEDIUM5.4Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can...
CVE-2026-2055HIGH7.5A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown funct...
CVE-2026-2054HIGH7.5A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. Impacted is an unknown function of ...
CVE-2026-2018CRITICAL9.8A flaw has been found in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/s...
CVE-2026-2017CRITICAL9.8A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurity...
CVE-2026-2016HIGH7.8A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is...
CVE-2026-1293MEDIUM6.4The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-...
CVE-2026-2015HIGH8.8A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatu...
CVE-2026-2014CRITICAL9.8A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of t...
CVE-2026-2013CRITICAL9.8A vulnerability was identified in itsourcecode Student Management System 1.0. This affects an unknown function of the fi...
CVE-2026-24928MEDIUM5.5Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may a...
CVE-2026-24927MEDIUM5.5Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerabi...
CVE-2026-24924MEDIUM5.5Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability ...
CVE-2026-24920MEDIUM5.5Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect ava...
CVE-2026-2012CRITICAL9.8A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown functio...
CVE-2026-2011CRITICAL9.8A vulnerability was found in itsourcecode Student Management System 1.0. The affected element is an unknown function of ...
CVE-2026-24931MEDIUM5.5Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerabi...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now