2026 CVE Vulnerabilities
85,185 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1888 | MEDIUM | 6.4 | 0.2% | Feb 6, 2026 | The Docus – YouTube Video Playlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'docusplayl... |
| CVE-2026-1808 | MEDIUM | 6.4 | 0.2% | Feb 6, 2026 | The Orange Confort+ accessibility toolbar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |
| CVE-2026-1401 | MEDIUM | 6.4 | 0.2% | Feb 6, 2026 | The Tune Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CSV import in all versions up to,... |
| CVE-2026-0521 | MEDIUM | 6.1 | 0.3% | Feb 6, 2026 | A reflected cross-site scripting (XSS) vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allow... |
| CVE-2026-1991 | MEDIUM | 5.5 | 0.2% | Feb 6, 2026 | A vulnerability was detected in libuvc up to 0.0.7. Affected is the function uvc_scan_streaming of the file src/device.c... |
| CVE-2026-0598 | MEDIUM | 4.2 | 0.2% | Feb 6, 2026 | A security flaw was identified in the Ansible Lightspeed API conversation endpoints that handle AI chat interactions. Th... |
| CVE-2026-1990 | LOW | 3.3 | 0.2% | Feb 6, 2026 | A security vulnerability has been detected in oatpp up to 1.3.1. This impacts the function oatpp::data::type::ObjectWrap... |
| CVE-2026-1979 | MEDIUM | 5.5 | 0.2% | Feb 6, 2026 | A flaw has been found in mruby up to 3.4.0. This affects the function mrb_vm_exec of the file src/vm.c of the component ... |
| CVE-2026-1978 | HIGH | 7.5 | 0.4% | Feb 6, 2026 | A vulnerability was detected in kalyan02 NanoCMS up to 0.4. Affected by this issue is some unknown functionality of the ... |
| CVE-2026-25698 | — | — | — | Feb 6, 2026 | Rejected reason: Not used |
| CVE-2026-25697 | — | — | — | Feb 6, 2026 | Rejected reason: Not used |
| CVE-2026-25696 | — | — | — | Feb 6, 2026 | Rejected reason: Not used |
| CVE-2026-25695 | — | — | — | Feb 6, 2026 | Rejected reason: Not used |
| CVE-2026-25694 | — | — | — | Feb 6, 2026 | Rejected reason: Not used |
| CVE-2026-25693 | — | — | — | Feb 6, 2026 | Rejected reason: Not used |
| CVE-2026-25692 | — | — | — | Feb 6, 2026 | Rejected reason: Not used |
| CVE-2026-1977 | MEDIUM | 6.3 | 0.2% | Feb 6, 2026 | A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e298... |
| CVE-2026-1976 | HIGH | 7.5 | 0.5% | Feb 6, 2026 | A weakness has been identified in Free5GC up to 4.1.0. Affected is the function SessionDeletionResponse of the component... |
| CVE-2026-1975 | HIGH | 7.5 | 0.5% | Feb 6, 2026 | A security flaw has been discovered in Free5GC up to 4.1.0. This impacts the function identityTriggerType of the file pf... |
| CVE-2026-1228 | MEDIUM | 4.3 | 0.2% | Feb 6, 2026 | The Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) plugin for WordPress is ... |
| CVE-2026-1974 | HIGH | 7.5 | 0.5% | Feb 6, 2026 | A vulnerability was identified in Free5GC up to 4.1.0. This affects the function ResolveNodeIdToIp of the file internal/... |
| CVE-2026-1973 | HIGH | 7.5 | 0.5% | Feb 6, 2026 | A vulnerability was determined in Free5GC up to 4.1.0. The impacted element is the function establishPfcpSession of the ... |
| CVE-2026-1972 | HIGH | 7.5 | 0.6% | Feb 6, 2026 | A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Perform... |
| CVE-2026-1971 | MEDIUM | 4.8 | 0.2% | Feb 6, 2026 | A vulnerability has been found in Edimax BR-6288ACL up to 1.12. Impacted is the function wiz_WISP24gmanual of the file w... |
| CVE-2026-23623 | MEDIUM | 5.3 | 0.2% | Feb 6, 2026 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Devel... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now