2026 CVE Vulnerabilities
85,188 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1287 | MEDIUM | 5.4 | 0.8% | Feb 3, 2026 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `FilteredRelation` is subject to ... |
| CVE-2026-1285 | HIGH | 7.5 | 1.0% | Feb 3, 2026 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `django.utils.text.Truncator.char... |
| CVE-2026-1207 | MEDIUM | 5.4 | 9.4% | Feb 3, 2026 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on ``RasterField``... |
| CVE-2026-1664 | MEDIUM | 6.9 | 0.4% | Feb 3, 2026 | Summary An Insecure Direct Object Reference has been found to exist in `createHeaderBasedEmailResolver()` function with... |
| CVE-2026-1432 | CRITICAL | 9.3 | 0.3% | Feb 3, 2026 | SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vuln... |
| CVE-2026-1730 | HIGH | 8.8 | 0.5% | Feb 3, 2026 | The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation i... |
| CVE-2026-1592 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature.... |
| CVE-2026-1591 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A ma... |
| CVE-2026-1375 | HIGH | 8.1 | 0.3% | Feb 3, 2026 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Refere... |
| CVE-2026-1371 | MEDIUM | 5.3 | 0.3% | Feb 3, 2026 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposur... |
| CVE-2026-24465 | CRITICAL | 9.8 | 0.7% | Feb 3, 2026 | Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead ... |
| CVE-2026-24449 | MEDIUM | 5.1 | 0.2% | Feb 3, 2026 | For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information. |
| CVE-2026-22550 | HIGH | 8.8 | 1.7% | Feb 3, 2026 | OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may l... |
| CVE-2026-20704 | MEDIUM | 5.1 | 0.1% | Feb 3, 2026 | Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page whi... |
| CVE-2026-1447 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | The Mail Mint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1... |
| CVE-2026-1210 | MEDIUM | 6.4 | 0.3% | Feb 3, 2026 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_elementor_dat... |
| CVE-2026-1065 | HIGH | 7.2 | 0.3% | Feb 3, 2026 | The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and inc... |
| CVE-2026-1058 | HIGH | 7.1 | 0.3% | Feb 3, 2026 | The Form Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via hidden field values in all versions... |
| CVE-2026-0617 | HIGH | 7.2 | 0.4% | Feb 3, 2026 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-S... |
| CVE-2026-24694 | HIGH | 8.4 | 0.1% | Feb 3, 2026 | The installer for Roland Cloud Manager ver.3.1.19 and prior insecurely loads Dynamic Link Libraries (DLLs), which could ... |
| CVE-2026-0950 | MEDIUM | 5.3 | 0.3% | Feb 3, 2026 | The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Information Di... |
| CVE-2026-24936 | CRITICAL | 9.8 | 0.8% | Feb 3, 2026 | When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerab... |
| CVE-2026-1788 | MEDIUM | 6.6 | 0.4% | Feb 3, 2026 | : Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux (QUIC protocol implementation, packet p... |
| CVE-2026-0909 | MEDIUM | 5.3 | 0.3% | Feb 3, 2026 | The WP ULike plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including... |
| CVE-2026-0383 | HIGH | 7.8 | 0.2% | Feb 3, 2026 | A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash she... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now