2026 CVE Vulnerabilities
85,245 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-20405 | MEDIUM | 6.5 | 0.2% | Feb 2, 2026 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i... |
| CVE-2026-20404 | MEDIUM | 6.5 | 0.5% | Feb 2, 2026 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service... |
| CVE-2026-20403 | MEDIUM | 6.5 | 0.2% | Feb 2, 2026 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i... |
| CVE-2026-20402 | MEDIUM | 6.5 | 0.2% | Feb 2, 2026 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service... |
| CVE-2026-20401 | HIGH | 7.5 | 0.7% | Feb 2, 2026 | In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if... |
| CVE-2026-1518 | — | — | 0.2% | Feb 2, 2026 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. After further review by the Keycloak project and Red Hat, the reporte... |
| CVE-2026-22888 | HIGH | 7.5 | 0.4% | Feb 2, 2026 | Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of p... |
| CVE-2026-22881 | MEDIUM | 5.4 | 0.2% | Feb 2, 2026 | Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attac... |
| CVE-2026-20711 | MEDIUM | 6.1 | 0.2% | Feb 2, 2026 | Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacke... |
| CVE-2026-0658 | MEDIUM | 4.3 | 0.1% | Feb 2, 2026 | The Five Star Restaurant Reservations WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, whi... |
| CVE-2026-1746 | HIGH | 8.8 | 0.4% | Feb 2, 2026 | A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/ap... |
| CVE-2026-1745 | MEDIUM | 4.3 | 0.2% | Feb 2, 2026 | A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. Th... |
| CVE-2026-1531 | HIGH | 8.1 | 0.3% | Feb 2, 2026 | A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification... |
| CVE-2026-1530 | HIGH | 8.1 | 0.3% | Feb 2, 2026 | A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) atta... |
| CVE-2026-25202 | CRITICAL | 9.8 | 0.4% | Feb 2, 2026 | The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo... |
| CVE-2026-25201 | HIGH | 8.8 | 0.4% | Feb 2, 2026 | An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9... |
| CVE-2026-25200 | CRITICAL | 9.8 | 0.5% | Feb 2, 2026 | A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Sto... |
| CVE-2026-24788 | HIGH | 8.8 | 1.3% | Feb 2, 2026 | RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary O... |
| CVE-2026-1744 | MEDIUM | 4.8 | 0.4% | Feb 2, 2026 | A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of t... |
| CVE-2026-1743 | LOW | 3.1 | 0.4% | Feb 2, 2026 | A vulnerability has been found in DJI Mavic Mini, Air, Spark and Mini SE up to 01.00.0500. Affected by this vulnerabilit... |
| CVE-2026-1742 | HIGH | 7.2 | 0.3% | Feb 2, 2026 | A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncl... |
| CVE-2026-1741 | MEDIUM | 6.6 | 0.5% | Feb 2, 2026 | A vulnerability was determined in EFM ipTIME A8004T 14.18.2. Affected is the function httpcon_check_session_url of the f... |
| CVE-2026-1740 | CRITICAL | 9.8 | 0.5% | Feb 2, 2026 | A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impacts the function httpcon_check_session_url of the file ... |
| CVE-2026-1739 | HIGH | 7.5 | 0.7% | Feb 2, 2026 | A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the ... |
| CVE-2026-1738 | MEDIUM | 5.5 | 0.7% | Feb 2, 2026 | A flaw has been found in Open5GS up to 2.7.6. The impacted element is the function sgwc_tunnel_add of the file /src/sgwc... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now