2026 CVE Vulnerabilities

85,245 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-24071HIGH7.8It was found that the XPC service offered by the privileged helper of Native Access uses the PID of the connecting clie...
CVE-2026-24070HIGH8.8During the installation of the Native Access application, a privileged helper `com.native-instruments.NativeAccess.Helpe...
CVE-2026-1761HIGH8.6A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP ...
CVE-2026-1760MEDIUM5.3A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles r...
CVE-2026-1186HIGH8.6EAP Legislator is vulnerable to Path Traversal in file extraction functionality. Attacker can prepare zipx archive (defa...
CVE-2026-1757MEDIUM6.2A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocat...
CVE-2026-0599HIGH7.5A vulnerability in huggingface/text-generation-inference version 3.3.6 allows unauthenticated remote attackers to exploi...
CVE-2026-1751LOW3.1A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could h...
CVE-2026-1117HIGH8.2A vulnerability in the `lollms_generation_events.py` component of parisneo/lollms version 5.9.0 allows unauthenticated a...
CVE-2026-20422MEDIUM6.5In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service...
CVE-2026-20421MEDIUM6.5In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service...
CVE-2026-20420MEDIUM6.5In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service,...
CVE-2026-20419MEDIUM6.5In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead ...
CVE-2026-20418CRITICAL9.8In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation o...
CVE-2026-20417MEDIUM5.3In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p...
CVE-2026-20415MEDIUM5.5In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if ...
CVE-2026-20414MEDIUM6.7In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of pri...
CVE-2026-20413MEDIUM6.7In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of...
CVE-2026-20412HIGH7.8In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation...
CVE-2026-20411HIGH7.8In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of serv...
CVE-2026-20410MEDIUM6.7In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of...
CVE-2026-20409HIGH7.8In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of...
CVE-2026-20408HIGH8.8In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adja...
CVE-2026-20407CRITICAL9.3In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local ...
CVE-2026-20406MEDIUM6.5In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now