2026 CVE Vulnerabilities
85,188 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25237 | CRITICAL | 9.8 | 0.4% | Feb 3, 2026 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() ... |
| CVE-2026-25236 | CRITICAL | 9.8 | 0.3% | Feb 3, 2026 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk e... |
| CVE-2026-25235 | HIGH | 7.5 | 0.3% | Feb 3, 2026 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, predictable verificati... |
| CVE-2026-25234 | CRITICAL | 9.8 | 0.3% | Feb 3, 2026 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulner... |
| CVE-2026-25233 | CRITICAL | 9.1 | 0.3% | Feb 3, 2026 | PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadm... |
| CVE-2026-24427 | MEDIUM | 5.5 | 0.1% | Feb 3, 2026 | Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior expose sensitive information in web management responses. ... |
| CVE-2026-24426 | MEDIUM | 6.1 | 0.2% | Feb 3, 2026 | Shenzhen Tenda AC7 firmware version V03.03.03.01_cn and prior contain an improper output encoding vulnerability in the w... |
| CVE-2026-1802 | HIGH | 7.3 | 2.7% | Feb 3, 2026 | A security flaw has been discovered in Ziroom ZHOME A0101 1.0.1.0. This issue affects the function macAddrClone of the f... |
| CVE-2026-0620 | MEDIUM | 6 | 0.2% | Feb 3, 2026 | When configured as L2TP/IPSec VPN server, Archer AXE75 V1 may accept connections using L2TP without IPSec protection, ev... |
| CVE-2026-24774 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24773 | HIGH | 7.5 | 0.4% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24674 | MEDIUM | 6.1 | 0.2% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24673 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24672 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24671 | MEDIUM | 4.8 | 0.2% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24670 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24669 | HIGH | 7.8 | 0.2% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24668 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24667 | MEDIUM | 5 | 0.1% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24666 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24665 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-24664 | MEDIUM | 5.3 | 0.3% | Feb 3, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-22228 | MEDIUM | 4.9 | 0.3% | Feb 3, 2026 | An authenticated user with high privileges may trigger a denial‑of‑service condition in TP-Link Archer BE230 v1.2 by res... |
| CVE-2026-22220 | MEDIUM | 4.5 | 0.2% | Feb 3, 2026 | A lack of proper input validation in the HTTP processing path in TP-Link Archer BE230 v1.2 (web modules) may allow a cra... |
| CVE-2026-1568 | CRITICAL | 9.6 | 0.1% | Feb 3, 2026 | Rapid7 InsightVM versions before 8.34.0 contain a signature verification issue on the Assertion Consumer Service (ACS) c... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now