2026 CVE Vulnerabilities
85,188 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1972 | HIGH | 7.5 | 0.6% | Feb 6, 2026 | A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Perform... |
| CVE-2026-1971 | MEDIUM | 4.8 | 0.2% | Feb 6, 2026 | A vulnerability has been found in Edimax BR-6288ACL up to 1.12. Impacted is the function wiz_WISP24gmanual of the file w... |
| CVE-2026-23623 | MEDIUM | 5.3 | 0.2% | Feb 6, 2026 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Devel... |
| CVE-2026-24302 | CRITICAL | 9.8 | 1.5% | Feb 5, 2026 | Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-24300 | CRITICAL | 9.8 | 1.3% | Feb 5, 2026 | Azure Front Door Elevation of Privilege Vulnerability |
| CVE-2026-21532 | HIGH | 8.2 | 0.8% | Feb 5, 2026 | Azure Function Information Disclosure Vulnerability |
| CVE-2026-0391 | MEDIUM | 6.5 | 0.6% | Feb 5, 2026 | User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attac... |
| CVE-2026-25815 | LOW | 3.2 | 0.1% | Feb 5, 2026 | Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exp... |
| CVE-2026-1970 | MEDIUM | 6.1 | 0.3% | Feb 5, 2026 | A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform... |
| CVE-2026-1964 | MEDIUM | 5.3 | 0.2% | Feb 5, 2026 | A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the... |
| CVE-2026-1963 | CRITICAL | 9.8 | 0.3% | Feb 5, 2026 | A vulnerability was found in WeKan up to 8.20. This affects an unknown function of the file models/attachments.js of the... |
| CVE-2026-1962 | CRITICAL | 9.8 | 0.3% | Feb 5, 2026 | A vulnerability has been found in WeKan up to 8.20. The impacted element is an unknown function of the file server/attac... |
| CVE-2026-0106 | CRITICAL | 9.3 | 0.1% | Feb 5, 2026 | In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to l... |
| CVE-2026-25630 | — | — | — | Feb 5, 2026 | Rejected reason: Reason: This candidate was issued in error. |
| CVE-2026-1301 | MEDIUM | 6.8 | 0.3% | Feb 5, 2026 | In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated ar... |
| CVE-2026-1707 | MEDIUM | 6.3 | 0.4% | Feb 5, 2026 | pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when run... |
| CVE-2026-0715 | MEDIUM | 6.8 | 0.2% | Feb 5, 2026 | Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provide... |
| CVE-2026-0714 | MEDIUM | 6.8 | 0.1% | Feb 5, 2026 | A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption o... |
| CVE-2026-1927 | MEDIUM | 5.4 | 0.2% | Feb 5, 2026 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to unauthorized access of data due... |
| CVE-2026-1523 | HIGH | 8.7 | 1.1% | Feb 5, 2026 | Path Traversal vulnerability in Digitek ADT1100 and Digitek DT950 from PRIMION DIGITEK, S.L.U (Azkoyen Group). This vuln... |
| CVE-2026-23797 | MEDIUM | 4.9 | 0.2% | Feb 5, 2026 | In Quick.Cart user passwords are stored in plaintext form. An attacker with high privileges can display users' password ... |
| CVE-2026-23796 | CRITICAL | 9.8 | 0.3% | Feb 5, 2026 | Quick.Cart allows a user's session identifier to be set before authentication. The value of this session ID stays the sa... |
| CVE-2026-23572 | HIGH | 7.2 | 0.3% | Feb 5, 2026 | Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an ... |
| CVE-2026-1966 | LOW | 2.4 | 0.2% | Feb 5, 2026 | YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated ... |
| CVE-2026-1517 | MEDIUM | 4.7 | 0.3% | Feb 5, 2026 | A vulnerability was identified in iomad up to 5.0. Affected is an unknown function of the component Company Admin Block.... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now