2026 CVE Vulnerabilities
85,245 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24043 | MEDIUM | 5.4 | 0.3% | Feb 2, 2026 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addMetadata... |
| CVE-2026-24040 | MEDIUM | 4.8 | 0.3% | Feb 2, 2026 | jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, the addJS method in the jspdf Node.js build utilizes ... |
| CVE-2026-24007 | MEDIUM | 4.6 | 0.1% | Feb 2, 2026 | Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protecti... |
| CVE-2026-23997 | CRITICAL | 9 | 0.4% | Feb 2, 2026 | FacturaScripts is open-source enterprise resource planning and accounting software. In 2025.71 and earlier, a Stored Cro... |
| CVE-2026-23515 | HIGH | 8.8 | 4.2% | Feb 2, 2026 | Signal K Server is a server application that runs on a central hub in a boat. Prior to 1.5.0, a command injection vulner... |
| CVE-2026-23476 | MEDIUM | 5.4 | 0.3% | Feb 2, 2026 | FacturaScripts is open-source enterprise resource planning and accounting software. Prior to 2025.8, there a reflected X... |
| CVE-2026-22780 | MEDIUM | 6.1 | 0.2% | Feb 2, 2026 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be expl... |
| CVE-2026-22778 | CRITICAL | 9.8 | 3.8% | Feb 2, 2026 | vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid i... |
| CVE-2026-1778 | HIGH | 8.2 | 0.2% | Feb 2, 2026 | Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made b... |
| CVE-2026-1777 | HIGH | 8.5 | 0.5% | Feb 2, 2026 | The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext r... |
| CVE-2026-0924 | HIGH | 7 | 0.2% | Feb 2, 2026 | BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root ... |
| CVE-2026-22229 | HIGH | 7.2 | 1.9% | Feb 2, 2026 | A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN clie... |
| CVE-2026-22227 | HIGH | 7.2 | 2.6% | Feb 2, 2026 | A command injection vulnerability may be exploited after the admin's authentication via the configuration backup restora... |
| CVE-2026-22226 | HIGH | 7.2 | 2.4% | Feb 2, 2026 | A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration modu... |
| CVE-2026-22225 | HIGH | 7.2 | 2.7% | Feb 2, 2026 | A command injection vulnerability may be exploited after the admin's authentication in the VPN Connection Service on the... |
| CVE-2026-22224 | HIGH | 7.2 | 2.6% | Feb 2, 2026 | A command injection vulnerability may be exploited after the admin's authentication in the cloud communication interface... |
| CVE-2026-22223 | HIGH | 8 | 1.5% | Feb 2, 2026 | An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn modules) allows adjacent authent... |
| CVE-2026-22222 | HIGH | 8 | 1.5% | Feb 2, 2026 | An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent a... |
| CVE-2026-22221 | HIGH | 8 | 1.4% | Feb 2, 2026 | An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenti... |
| CVE-2026-0631 | HIGH | 8 | 1.6% | Feb 2, 2026 | An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE36... |
| CVE-2026-0630 | HIGH | 8 | 1.3% | Feb 2, 2026 | An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(web modules) and Archer AXE75 v1.0 allows adjacent ... |
| CVE-2026-1770 | MEDIUM | 4.5 | 0.4% | Feb 2, 2026 | Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticat... |
| CVE-2026-1232 | MEDIUM | 6.8 | 0.1% | Feb 2, 2026 | A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7. Und... |
| CVE-2026-0921 | — | — | — | Feb 2, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-1703 | LOW | 2 | 0.4% | Feb 2, 2026 | When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installati... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now