2026 CVE Vulnerabilities
85,188 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-0743 | MEDIUM | 4.4 | 0.3% | Feb 4, 2026 | The WP Content Permission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ohmem-message' para... |
| CVE-2026-0742 | MEDIUM | 6.4 | 0.3% | Feb 4, 2026 | The Smart Appointment & Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the saab_save_form... |
| CVE-2026-0681 | MEDIUM | 4.4 | 0.3% | Feb 4, 2026 | The Extended Random Number Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin se... |
| CVE-2026-0679 | MEDIUM | 5.3 | 0.3% | Feb 4, 2026 | The Fortis for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to an inverted nonce check in ... |
| CVE-2026-0572 | MEDIUM | 6.5 | 0.3% | Feb 4, 2026 | The WebPurify Profanity Filter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ... |
| CVE-2026-1819 | HIGH | 8.8 | 0.3% | Feb 4, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Karel Elect... |
| CVE-2026-24447 | MEDIUM | 6.5 | 0.2% | Feb 4, 2026 | If a malformed data is input to the affected product, a CSV file downloaded from the affected product may contain such m... |
| CVE-2026-23704 | MEDIUM | 6.5 | 0.2% | Feb 4, 2026 | A non-administrative user can upload malicious files. When an administrator or the product accesses that file, an arbitr... |
| CVE-2026-22875 | MEDIUM | 5.4 | 0.2% | Feb 4, 2026 | Movable Type contains a stored cross-site scripting vulnerability in Export Sites. If crafted input is stored by an atta... |
| CVE-2026-21393 | MEDIUM | 5.4 | 0.2% | Feb 4, 2026 | Movable Type contains a stored cross-site scripting vulnerability in Edit Comment. If crafted input is stored by an atta... |
| CVE-2026-20987 | HIGH | 8.7 | 0.1% | Feb 4, 2026 | Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute pri... |
| CVE-2026-20986 | MEDIUM | 5.5 | 0.2% | Feb 4, 2026 | Path traversal in Samsung Members prior to Chinese version 15.5.05.4 allows local attackers to overwrite data within Sam... |
| CVE-2026-20985 | MEDIUM | 4.3 | 0.3% | Feb 4, 2026 | Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL... |
| CVE-2026-20984 | MEDIUM | 5.1 | 0.1% | Feb 4, 2026 | Improper handling of insufficient permission in Galaxy Wearable installed on non-Samsung Device prior to version 2.2.68 ... |
| CVE-2026-20983 | HIGH | 7.8 | 0.1% | Feb 4, 2026 | Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attacke... |
| CVE-2026-20982 | MEDIUM | 6 | 0.3% | Feb 4, 2026 | Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with s... |
| CVE-2026-20981 | MEDIUM | 6.6 | 0.2% | Feb 4, 2026 | Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execut... |
| CVE-2026-20980 | MEDIUM | 6.8 | 0.2% | Feb 4, 2026 | Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands... |
| CVE-2026-20979 | HIGH | 7.8 | 0.1% | Feb 4, 2026 | Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary act... |
| CVE-2026-20978 | MEDIUM | 6.1 | 0.1% | Feb 4, 2026 | Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persiste... |
| CVE-2026-20977 | MEDIUM | 5.5 | 0.1% | Feb 4, 2026 | Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its fun... |
| CVE-2026-1756 | HIGH | 8.8 | 0.7% | Feb 4, 2026 | The WP FOFT Loader plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in... |
| CVE-2026-1791 | LOW | 2.7 | 0.3% | Feb 4, 2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Hillstone Networks Operation and Maintenance Security G... |
| CVE-2026-1835 | MEDIUM | 4.3 | 0.2% | Feb 4, 2026 | A vulnerability was identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. This affects an unknown... |
| CVE-2026-1813 | CRITICAL | 9.8 | 0.3% | Feb 4, 2026 | A vulnerability was found in bolo-blog bolo-solo up to 2.6.4. Affected is an unknown function of the file src/main/java/... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now