2026 CVE Vulnerabilities
85,245 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23022 | MEDIUM | 5.5 | 0.1% | Jan 31, 2026 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak in idpf_vc_core_deinit() Mak... |
| CVE-2026-23021 | MEDIUM | 5.5 | 0.2% | Jan 31, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: fix memory leak in update_eth_re... |
| CVE-2026-23020 | MEDIUM | 5.5 | 0.1% | Jan 31, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: 3com: 3c59x: fix possible null dereference in ... |
| CVE-2026-23019 | MEDIUM | 5.5 | 0.1% | Jan 31, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix NULL dereference on dev... |
| CVE-2026-23018 | MEDIUM | 5.5 | 0.1% | Jan 31, 2026 | In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before initializing extent tree... |
| CVE-2026-23017 | MEDIUM | 5.5 | 0.1% | Jan 31, 2026 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the init_task on load ... |
| CVE-2026-23016 | MEDIUM | 5.5 | 0.1% | Jan 31, 2026 | In the Linux kernel, the following vulnerability has been resolved: inet: frags: drop fraglist conntrack references Ja... |
| CVE-2026-23015 | MEDIUM | 5.5 | 0.1% | Jan 31, 2026 | In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix reference leak in gpio_mpsse_probe... |
| CVE-2026-1251 | MEDIUM | 5.4 | 0.3% | Jan 31, 2026 | The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Objec... |
| CVE-2026-0683 | MEDIUM | 6.5 | 0.3% | Jan 31, 2026 | The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to SQL Injection via the... |
| CVE-2026-1431 | MEDIUM | 5.3 | 0.3% | Jan 31, 2026 | The Booking Calendar plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check... |
| CVE-2026-25156 | MEDIUM | 6.3 | 0.2% | Jan 30, 2026 | HotCRP is conference review software. HotCRP versions from October 2025 through January 2026 delivered documents of all ... |
| CVE-2026-25154 | MEDIUM | 6.1 | 0.3% | Jan 30, 2026 | LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local ... |
| CVE-2026-25153 | HIGH | 8.8 | 0.5% | Jan 30, 2026 | Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.... |
| CVE-2026-25152 | MEDIUM | 6.5 | 0.4% | Jan 30, 2026 | Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.... |
| CVE-2026-1705 | LOW | 2.4 | 0.2% | Jan 30, 2026 | A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function ad_virtual_se... |
| CVE-2026-25141 | CRITICAL | 9.8 | 0.6% | Jan 30, 2026 | Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions starti... |
| CVE-2026-25130 | CRITICAL | 9.6 | 0.8% | Jan 30, 2026 | Cybersecurity AI (CAI) is a framework for AI Security. In versions up to and including 0.5.10, the CAI (Cybersecurity AI... |
| CVE-2026-25129 | HIGH | 7.3 | 0.3% | Jan 30, 2026 | PsySH is a runtime developer console, interactive debugger, and REPL for PHP. Prior to versions 0.11.23 and 0.12.19, Psy... |
| CVE-2026-1723 | CRITICAL | 9.2 | 0.9% | Jan 30, 2026 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X60... |
| CVE-2026-23835 | MEDIUM | 5.7 | 0.3% | Jan 30, 2026 | LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in `Knowledge Ba... |
| CVE-2026-1702 | HIGH | 8.8 | 0.4% | Jan 30, 2026 | A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of ... |
| CVE-2026-1701 | CRITICAL | 9.8 | 0.4% | Jan 30, 2026 | A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown... |
| CVE-2026-1700 | MEDIUM | 5.4 | 0.2% | Jan 30, 2026 | A weakness has been identified in projectworlds House Rental and Property Listing 1.0. This vulnerability affects unknow... |
| CVE-2026-1691 | HIGH | 8.8 | 0.5% | Jan 30, 2026 | A vulnerability has been found in bolo-solo up to 2.6.4. This impacts the function importMarkdownsSync of the file src/m... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now