2026 CVE Vulnerabilities
85,188 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25541 | HIGH | 7.5 | 0.6% | Feb 4, 2026 | Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer o... |
| CVE-2026-25540 | MEDIUM | 6.5 | 0.4% | Feb 4, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mas... |
| CVE-2026-25539 | HIGH | 7.2 | 1.0% | Feb 4, 2026 | SiYuan is a personal knowledge management system. Prior to version 3.5.5, the /api/file/copyFile endpoint does not valid... |
| CVE-2026-25538 | HIGH | 8.8 | 0.4% | Feb 4, 2026 | Devtron is an open source tool integration platform for Kubernetes. In version 2.0.0 and prior, a vulnerability exists i... |
| CVE-2026-25537 | HIGH | 7.5 | 0.4% | Feb 4, 2026 | jsonwebtoken is a JWT lib in rust. Prior to version 10.3.0, there is a Type Confusion vulnerability in jsonwebtoken, spe... |
| CVE-2026-25536 | HIGH | 7.1 | 0.3% | Feb 4, 2026 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to... |
| CVE-2026-25526 | CRITICAL | 9.8 | 0.9% | Feb 4, 2026 | JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to ver... |
| CVE-2026-25523 | MEDIUM | 5.3 | 0.3% | Feb 4, 2026 | Magento-lts is a long-term support alternative to Magento Community Edition (CE). Prior to version 20.16.1, the admin ur... |
| CVE-2026-25521 | HIGH | 8.8 | 0.3% | Feb 4, 2026 | Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. In versions from 2.0.12 to... |
| CVE-2026-25518 | MEDIUM | 5.9 | 0.3% | Feb 4, 2026 | cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the proc... |
| CVE-2026-1892 | MEDIUM | 5 | 0.2% | Feb 4, 2026 | A security vulnerability has been detected in WeKan up to 8.20. This affects the function setBoardOrgs of the file model... |
| CVE-2026-1884 | MEDIUM | 4.9 | 0.4% | Feb 4, 2026 | A weakness has been identified in ZenTao up to 21.7.6-85642. The impacted element is the function fetchHook of the file ... |
| CVE-2026-25519 | CRITICAL | 9.8 | 0.5% | Feb 4, 2026 | OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and electio... |
| CVE-2026-25517 | LOW | 2.7 | 0.3% | Feb 4, 2026 | Wagtail is an open source content management system built on Django. Prior to versions 6.3.6, 7.0.4, 7.1.3, 7.2.2, and 7... |
| CVE-2026-25512 | HIGH | 8.8 | 18.5% | Feb 4, 2026 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, a... |
| CVE-2026-25511 | MEDIUM | 4.9 | 0.4% | Feb 4, 2026 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, a... |
| CVE-2026-25499 | HIGH | 7.5 | 0.4% | Feb 4, 2026 | Terraform / OpenTofu Provider adds support for Proxmox Virtual Environment. Prior to version 0.93.1, in the SSH configur... |
| CVE-2026-1554 | MEDIUM | 4.2 | 0.2% | Feb 4, 2026 | XML Injection (aka Blind XPath Injection) vulnerability in Drupal Central Authentication System (CAS) Server allows Priv... |
| CVE-2026-1553 | MEDIUM | 4.8 | 0.1% | Feb 4, 2026 | Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas:... |
| CVE-2026-0948 | MEDIUM | 6.5 | 0.2% | Feb 4, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login allows Pri... |
| CVE-2026-0947 | MEDIUM | 4.8 | 0.1% | Feb 4, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AT Internet... |
| CVE-2026-0946 | MEDIUM | 6.1 | 0.1% | Feb 4, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AT Internet... |
| CVE-2026-0945 | HIGH | 8.8 | 0.2% | Feb 4, 2026 | Privilege Defined With Unsafe Actions vulnerability in Drupal Role Delegation allows Privilege Escalation.This issue aff... |
| CVE-2026-0944 | MEDIUM | 5.3 | 0.2% | Feb 4, 2026 | Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Group invite allows Forceful Browsing.This ... |
| CVE-2026-25514 | HIGH | 8.8 | 0.5% | Feb 4, 2026 | FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScr... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now