2026 CVE Vulnerabilities
85,188 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1633 | CRITICAL | 10 | 0.5% | Feb 4, 2026 | The Synectix LAN 232 TRIO 3-Port serial to ethernet adapter exposes its web management interface without requiring authe... |
| CVE-2026-24514 | MEDIUM | 6.5 | 0.5% | Feb 3, 2026 | A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denia... |
| CVE-2026-24513 | LOW | 3.1 | 0.3% | Feb 3, 2026 | A security issue was discovered in ingress-nginx where the protection afforded by the `auth-url` Ingress annotation may ... |
| CVE-2026-24512 | HIGH | 8.8 | 0.5% | Feb 3, 2026 | A security issue was discovered in ingress-nginx where the `rules.http.paths.path` Ingress field can be used to inject c... |
| CVE-2026-1812 | CRITICAL | 9.8 | 0.4% | Feb 3, 2026 | A vulnerability has been found in bolo-blog bolo-solo up to 2.6.4. This impacts the function importFromCnblogs of the fi... |
| CVE-2026-1755 | MEDIUM | 6.4 | 0.2% | Feb 3, 2026 | The Menu Icons by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_wp_attachment_im... |
| CVE-2026-1632 | CRITICAL | 9.3 | 0.5% | Feb 3, 2026 | MOMA Seismic Station Version v2.4.2520 and prior exposes its web management interface without requiring authentication, ... |
| CVE-2026-1580 | HIGH | 8.8 | 0.5% | Feb 3, 2026 | A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation ... |
| CVE-2026-25510 | HIGH | 8.8 | 0.8% | Feb 3, 2026 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati... |
| CVE-2026-25509 | MEDIUM | 5.3 | 0.3% | Feb 3, 2026 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati... |
| CVE-2026-25224 | LOW | 3.7 | 0.5% | Feb 3, 2026 | Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.3, a denial-of-service vulnerability... |
| CVE-2026-25223 | HIGH | 7.5 | 0.8% | Feb 3, 2026 | Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.2, a validation bypass vulnerability... |
| CVE-2026-25155 | HIGH | 7.1 | 0.1% | Feb 3, 2026 | Qwik is a performance focused javascript framework. Prior to version 1.12.0, a typo in the regular expression within isC... |
| CVE-2026-25151 | MEDIUM | 5.9 | 0.2% | Feb 3, 2026 | Qwik is a performance focused javascript framework. Prior to version 1.19.0, Qwik City’s server-side request handler inc... |
| CVE-2026-25150 | CRITICAL | 10 | 0.6% | Feb 3, 2026 | Qwik is a performance focused javascript framework. Prior to version 1.19.0, a prototype pollution vulnerability exists ... |
| CVE-2026-25149 | MEDIUM | 6.1 | 0.2% | Feb 3, 2026 | Qwik is a performance focused javascript framework. Prior to version 1.19.0, an Open Redirect vulnerability in Qwik City... |
| CVE-2026-25148 | MEDIUM | 6.1 | 0.3% | Feb 3, 2026 | Qwik is a performance focused javascript framework. Prior to version 1.19.0, a Cross-Site Scripting vulnerability in Qwi... |
| CVE-2026-1811 | HIGH | 8.8 | 0.5% | Feb 3, 2026 | A flaw has been found in bolo-blog bolo-solo up to 2.6.4. This affects the function importFromMarkdown of the file src/m... |
| CVE-2026-1341 | CRITICAL | 9.3 | 0.5% | Feb 3, 2026 | Avation Light Engine Pro exposes its configuration and control interface without any authentication or access control. |
| CVE-2026-24887 | HIGH | 8.8 | 0.6% | Feb 3, 2026 | Claude Code is an agentic coding tool. Prior to version 2.0.72, due to an error in command parsing, it was possible to b... |
| CVE-2026-24053 | MEDIUM | 6.5 | 0.5% | Feb 3, 2026 | Claude Code is an agentic coding tool. Prior to version 2.0.74, due to a Bash command validation flaw in parsing ZSH clo... |
| CVE-2026-24052 | HIGH | 7.4 | 0.3% | Feb 3, 2026 | Claude Code is an agentic coding tool. Prior to version 1.0.111, Claude Code contained insufficient URL validation in it... |
| CVE-2026-1862 | HIGH | 8.8 | 0.6% | Feb 3, 2026 | Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2026-1861 | HIGH | 8.8 | 0.4% | Feb 3, 2026 | Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit... |
| CVE-2026-1810 | HIGH | 8.8 | 0.4% | Feb 3, 2026 | A vulnerability was detected in bolo-blog bolo-solo up to 2.6.4. The impacted element is the function unpackFilteredZip ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now