2026 CVE Vulnerabilities
85,188 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1801 | MEDIUM | 6.5 | 0.4% | Feb 3, 2026 | A flaw was found in libsoup, an HTTP client/server library. This HTTP Request Smuggling vulnerability arises from non-RF... |
| CVE-2026-25616 | MEDIUM | 6.1 | 0.4% | Feb 3, 2026 | Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665. |
| CVE-2026-25615 | HIGH | 7.2 | 0.5% | Feb 3, 2026 | Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668. |
| CVE-2026-25614 | HIGH | 7.5 | 0.4% | Feb 3, 2026 | Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680. |
| CVE-2026-24441 | MEDIUM | 5.9 | 0.2% | Feb 3, 2026 | Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose account credentials in plaintext within HTTP respon... |
| CVE-2026-24434 | MEDIUM | 6.5 | 0.1% | Feb 3, 2026 | Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior does not implement CSRF protections for administrative fun... |
| CVE-2026-24149 | HIGH | 7.8 | 0.3% | Feb 3, 2026 | NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker m... |
| CVE-2026-1846 | — | — | — | Feb 3, 2026 | Rejected reason: loading template... |
| CVE-2026-1803 | HIGH | 8.2 | 0.6% | Feb 3, 2026 | A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the component Dropbear ... |
| CVE-2026-25522 | MEDIUM | 4.8 | 0.3% | Feb 3, 2026 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a s... |
| CVE-2026-25503 | HIGH | 7.1 | 0.3% | Feb 3, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color ... |
| CVE-2026-25502 | HIGH | 7.8 | 0.2% | Feb 3, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color ... |
| CVE-2026-25490 | MEDIUM | 4.8 | 0.3% | Feb 3, 2026 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a s... |
| CVE-2026-25489 | MEDIUM | 4.8 | 0.3% | Feb 3, 2026 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a s... |
| CVE-2026-25488 | MEDIUM | 4.8 | 0.3% | Feb 3, 2026 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a s... |
| CVE-2026-25487 | MEDIUM | 4.8 | 0.3% | Feb 3, 2026 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a s... |
| CVE-2026-25486 | MEDIUM | 4.8 | 0.3% | Feb 3, 2026 | Craft Commerce is an ecommerce platform for Craft CMS. From version 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft ... |
| CVE-2026-25485 | MEDIUM | 4.8 | 0.3% | Feb 3, 2026 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a s... |
| CVE-2026-25484 | MEDIUM | 4.8 | 0.3% | Feb 3, 2026 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, the... |
| CVE-2026-25483 | MEDIUM | 5.4 | 0.3% | Feb 3, 2026 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a s... |
| CVE-2026-25482 | MEDIUM | 4.8 | 0.3% | Feb 3, 2026 | Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a s... |
| CVE-2026-25241 | CRITICAL | 9.8 | 0.4% | Feb 3, 2026 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, an unauthenticated SQL... |
| CVE-2026-25240 | CRITICAL | 9.8 | 0.3% | Feb 3, 2026 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulner... |
| CVE-2026-25239 | HIGH | 7.5 | 0.2% | Feb 3, 2026 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulner... |
| CVE-2026-25238 | CRITICAL | 9.8 | 0.3% | Feb 3, 2026 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulner... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now