2026 CVE Vulnerabilities
85,188 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24762 | HIGH | 7.5 | 0.2% | Feb 3, 2026 | RustFS is a distributed object storage system built in Rust. From versions alpha.13 to alpha.81, RustFS logs sensitive c... |
| CVE-2026-23795 | MEDIUM | 4.9 | 0.8% | Feb 3, 2026 | Improper Restriction of XML External Entity Reference vulnerability in Apache Syncope Console. An administrator with ade... |
| CVE-2026-23794 | MEDIUM | 6.8 | 0.4% | Feb 3, 2026 | Reflected XSS in Apache Syncope's Enduser Login page. An attacker that tricks a legitimate user into clicking a maliciou... |
| CVE-2026-21862 | HIGH | 7.5 | 0.2% | Feb 3, 2026 | RustFS is a distributed object storage system built in Rust. Prior to version alpha.78, IP-based access control can be b... |
| CVE-2026-25036 | MEDIUM | 6.5 | 0.3% | Feb 3, 2026 | Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Acce... |
| CVE-2026-25028 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-ele... |
| CVE-2026-25027 | HIGH | 7.5 | 0.3% | Feb 3, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-25024 | MEDIUM | 5.4 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Blair Williams ThirstyAffiliates thirstyaffiliates allows Cross Site ... |
| CVE-2026-25023 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mdedev Run Contests, Raffles... |
| CVE-2026-25022 | HIGH | 8.5 | 0.2% | Feb 3, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design Kivi... |
| CVE-2026-25021 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Mizan Themes Mizan Demo Importer mizan-demo-importer allows Exploiting Incorrectl... |
| CVE-2026-25020 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Co... |
| CVE-2026-25019 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Confi... |
| CVE-2026-25016 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured... |
| CVE-2026-25015 | MEDIUM | 4.3 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue ... |
| CVE-2026-25014 | MEDIUM | 4.3 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in themelooks Enter Addons enteraddons allows Cross Site Request Forgery... |
| CVE-2026-25012 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in gfazioli WP Bannerize Pro wp-bannerize-pro allows Exploiting Incorrectly Configur... |
| CVE-2026-25011 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface all... |
| CVE-2026-25010 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured ... |
| CVE-2026-24998 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPMU DEV - Your All-in-One W... |
| CVE-2026-24997 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Wired Impact Wired Impact Volunteer Management wired-impact-volunteer-management ... |
| CVE-2026-24996 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in wpelemento WPElemento Importer wpelemento-importer allows Exploiting Incorrectly ... |
| CVE-2026-24995 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorre... |
| CVE-2026-24994 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incor... |
| CVE-2026-24992 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in WPFactory Advanced WooCommerce Product Sales Reportin... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now