2026 CVE Vulnerabilities
85,245 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24904 | MEDIUM | 5.3 | 0.3% | Jan 29, 2026 | TrustTunnel is an open-source VPN protocol with a rule bypass issue in versions prior to 0.9.115. In `tls_listener.rs`, ... |
| CVE-2026-24902 | HIGH | 7.1 | 0.2% | Jan 29, 2026 | TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass... |
| CVE-2026-24846 | MEDIUM | 5 | 0.2% | Jan 29, 2026 | malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 1.8... |
| CVE-2026-24845 | MEDIUM | 6.5 | 0.3% | Jan 29, 2026 | malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.1... |
| CVE-2026-1625 | HIGH | 8.8 | 2.3% | Jan 29, 2026 | A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub_4250E0 of the file /boa... |
| CVE-2026-1624 | HIGH | 8.8 | 2.3% | Jan 29, 2026 | A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the... |
| CVE-2026-1340 | CRITICAL | 9.8 | 84.0% | Jan 29, 2026 | A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. |
| CVE-2026-1281 | CRITICAL | 9.8 | 81.2% | Jan 29, 2026 | A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. |
| CVE-2026-1623 | MEDIUM | 6.3 | 2.0% | Jan 29, 2026 | A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin... |
| CVE-2026-25068 | MEDIUM | 4.6 | 0.2% | Jan 29, 2026 | alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in t... |
| CVE-2026-24687 | MEDIUM | 6.5 | 0.4% | Jan 29, 2026 | Umbraco Forms is a form builder that integrates with the Umbraco content management system. It's possible for an authent... |
| CVE-2026-22806 | CRITICAL | 9.1 | 0.4% | Jan 29, 2026 | vCluster Platform provides a Kubernetes platform for managing virtual clusters, multi-tenancy, and cluster sharing. Prio... |
| CVE-2026-1610 | HIGH | 8.1 | 0.7% | Jan 29, 2026 | A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of t... |
| CVE-2026-1601 | MEDIUM | 6.3 | 1.8% | Jan 29, 2026 | A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of ... |
| CVE-2026-1457 | HIGH | 8.8 | 6.6% | Jan 29, 2026 | An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corru... |
| CVE-2026-1453 | CRITICAL | 9.8 | 0.5% | Jan 29, 2026 | A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated a... |
| CVE-2026-24780 | HIGH | 8.8 | 1.1% | Jan 29, 2026 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that aut... |
| CVE-2026-24414 | MEDIUM | 5.5 | 0.1% | Jan 29, 2026 | The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of W... |
| CVE-2026-24413 | MEDIUM | 5.5 | 0.1% | Jan 29, 2026 | Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.... |
| CVE-2026-24054 | CRITICAL | 10 | 0.4% | Jan 29, 2026 | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) th... |
| CVE-2026-23896 | HIGH | 8.8 | 0.3% | Jan 29, 2026 | immich is a high performance self-hosted photo and video management solution. Prior to version 2.5.0, API keys can escal... |
| CVE-2026-1600 | MEDIUM | 4.3 | 0.3% | Jan 29, 2026 | A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted ele... |
| CVE-2026-1599 | MEDIUM | 4.3 | 0.3% | Jan 29, 2026 | A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected ele... |
| CVE-2026-1598 | MEDIUM | 5.4 | 0.2% | Jan 29, 2026 | A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknow... |
| CVE-2026-1597 | HIGH | 8.8 | 0.3% | Jan 29, 2026 | A vulnerability has been found in Bdtask SalesERP up to 20260116. This issue affects some unknown processing of the comp... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now