2026 CVE Vulnerabilities
85,188 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-0662 | HIGH | 7.8 | 0.2% | Feb 4, 2026 | A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitra... |
| CVE-2026-0661 | HIGH | 8.4 | 0.2% | Feb 4, 2026 | A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A mal... |
| CVE-2026-0660 | HIGH | 8.4 | 0.2% | Feb 4, 2026 | A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerabil... |
| CVE-2026-0659 | HIGH | 7.8 | 0.2% | Feb 4, 2026 | A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bo... |
| CVE-2026-0538 | HIGH | 8.4 | 0.2% | Feb 4, 2026 | A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A ... |
| CVE-2026-0537 | HIGH | 8.4 | 0.2% | Feb 4, 2026 | A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A mal... |
| CVE-2026-23048 | — | — | 0.1% | Feb 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: udp: call skb_orphan() before skb_attempt_defer_fre... |
| CVE-2026-23047 | — | — | 0.2% | Feb 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: libceph: make calc_target() set t->paused, not just... |
| CVE-2026-23046 | — | — | 0.2% | Feb 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix device mismatch in devm_kzalloc/dev... |
| CVE-2026-23045 | — | — | 0.2% | Feb 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: net/ena: fix missing lock when update devlink param... |
| CVE-2026-23044 | — | — | 0.1% | Feb 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypt... |
| CVE-2026-23043 | — | — | 0.1% | Feb 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix NULL pointer dereference in do_abort_log... |
| CVE-2026-23042 | — | — | 0.1% | Feb 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix aux device unplugging when rdma is not su... |
| CVE-2026-23041 | — | — | 0.1% | Feb 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer crash in bnxt_ptp_enable ... |
| CVE-2026-23040 | — | — | 0.1% | Feb 4, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: fix typo in frequency notific... |
| CVE-2026-22549 | MEDIUM | 6.9 | 0.3% | Feb 4, 2026 | A vulnerability exists in F5 BIG-IP Container Ingress Services that may allow excessive permissions to read cluster secr... |
| CVE-2026-22548 | HIGH | 8.2 | 0.2% | Feb 4, 2026 | When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with con... |
| CVE-2026-20732 | MEDIUM | 4.3 | 0.2% | Feb 4, 2026 | A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error mes... |
| CVE-2026-20730 | LOW | 3.3 | 0.1% | Feb 4, 2026 | A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access ... |
| CVE-2026-1642 | HIGH | 8.2 | 0.3% | Feb 4, 2026 | A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) s... |
| CVE-2026-24735 | HIGH | 7.5 | 0.6% | Feb 4, 2026 | Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Ap... |
| CVE-2026-0873 | MEDIUM | 4.8 | 0.2% | Feb 4, 2026 | On a Cryptobox platform where administrator segregation based on entities is used, some vulnerabilities in Ercom Cryptob... |
| CVE-2026-1622 | MEDIUM | 4.8 | 0.1% | Feb 4, 2026 | Neo4j Enterprise and Community editions versions prior to 2026.01.3 and 5.26.21 are vulnerable to a potential informatio... |
| CVE-2026-1370 | MEDIUM | 4.9 | 0.3% | Feb 4, 2026 | The SIBS woocommerce payment gateway plugin for WordPress is vulnerable to time-based SQL Injection via the ‘referencedI... |
| CVE-2026-0816 | MEDIUM | 4.9 | 0.3% | Feb 4, 2026 | The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'delete_id' para... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now