2026 CVE Vulnerabilities
85,245 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1551 | HIGH | 8.8 | 0.4% | Jan 29, 2026 | A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /r... |
| CVE-2026-24897 | HIGH | 8.8 | 3.0% | Jan 28, 2026 | Erugo is a self-hosted file-sharing platform. In versions up to and including 0.2.14, an authenticated low-privileged us... |
| CVE-2026-1550 | HIGH | 8.8 | 0.4% | Jan 28, 2026 | A security flaw has been discovered in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown... |
| CVE-2026-1549 | MEDIUM | 4.3 | 0.5% | Jan 28, 2026 | A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionalit... |
| CVE-2026-1548 | HIGH | 8.8 | 3.1% | Jan 28, 2026 | A flaw has been found in Totolink A7000R 4.1cu.4154. This impacts the function CloudACMunualUpdateUserdata of the file /... |
| CVE-2026-24889 | MEDIUM | 5.3 | 0.4% | Jan 28, 2026 | soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the `Bytes::slice`, `Vec::slice... |
| CVE-2026-24888 | CRITICAL | 9.8 | 0.9% | Jan 28, 2026 | Maker.js is a 2D vector line drawing and shape modeling for CNC and laser cutters. In versions up to and including 0.19.... |
| CVE-2026-24857 | CRITICAL | 9.8 | 0.4% | Jan 28, 2026 | `bulk_extractor` is a digital forensics exploitation tool. Starting in version 1.4, `bulk_extractor`’s embedded unrar co... |
| CVE-2026-1547 | CRITICAL | 9.8 | 2.8% | Jan 28, 2026 | A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi... |
| CVE-2026-1546 | CRITICAL | 9.8 | 0.3% | Jan 28, 2026 | A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillI... |
| CVE-2026-1545 | CRITICAL | 9.8 | 0.4% | Jan 28, 2026 | A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function... |
| CVE-2026-1544 | HIGH | 8.8 | 3.3% | Jan 28, 2026 | A security flaw has been discovered in D-Link DIR-823X 250416. Impacted is the function sub_41E2A0 of the file /goform/s... |
| CVE-2026-24856 | HIGH | 7.8 | 0.2% | Jan 28, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color ... |
| CVE-2026-24835 | HIGH | 7.1 | 0.3% | Jan 28, 2026 | Podman Desktop is a graphical tool for developing on containers and Kubernetes. A critical authentication bypass vulnera... |
| CVE-2026-24769 | CRITICAL | 9 | 0.4% | Jan 28, 2026 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a stored cross-site scripting (XSS)... |
| CVE-2026-24768 | MEDIUM | 6.1 | 0.3% | Jan 28, 2026 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect (open redir... |
| CVE-2026-24767 | MEDIUM | 6.4 | 0.2% | Jan 28, 2026 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, a blind Server-Side Request Forgery... |
| CVE-2026-24766 | MEDIUM | 4.9 | 0.3% | Jan 28, 2026 | NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an authenticated user with org-leve... |
| CVE-2026-24742 | MEDIUM | 6.5 | 0.3% | Jan 28, 2026 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, non-adm... |
| CVE-2026-24739 | MEDIUM | 6.3 | 0.2% | Jan 28, 2026 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.... |
| CVE-2026-23743 | HIGH | 7.5 | 0.2% | Jan 28, 2026 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, permali... |
| CVE-2026-1535 | CRITICAL | 9.8 | 0.4% | Jan 28, 2026 | A security vulnerability has been detected in code-projects Online Music Site 1.0. This impacts an unknown function of t... |
| CVE-2026-1534 | CRITICAL | 9.8 | 0.4% | Jan 28, 2026 | A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Adm... |
| CVE-2026-1533 | CRITICAL | 9.8 | 0.4% | Jan 28, 2026 | A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function ... |
| CVE-2026-1532 | MEDIUM | 5.5 | 0.7% | Jan 28, 2026 | A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now