2026 CVE Vulnerabilities
85,245 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21865 | MEDIUM | 6.5 | 0.2% | Jan 28, 2026 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderat... |
| CVE-2026-24775 | HIGH | 7.3 | 0.1% | Jan 28, 2026 | OpenProject is an open-source, web-based project management software. In the new editor for collaborative documents base... |
| CVE-2026-24772 | CRITICAL | 9 | 0.2% | Jan 28, 2026 | OpenProject is an open-source, web-based project management software. To enable the real time collaboration on documents... |
| CVE-2026-0750 | HIGH | 7.5 | 0.3% | Jan 28, 2026 | Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Commerce Paybox on Drupa... |
| CVE-2026-0749 | MEDIUM | 6.1 | 0.2% | Jan 28, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Form Builde... |
| CVE-2026-24685 | HIGH | 8.8 | 0.3% | Jan 28, 2026 | OpenProject is an open-source, web-based project management software. Versions prior to 16.6.6 and 17.0.2 have an arbitr... |
| CVE-2026-22243 | HIGH | 8.8 | 0.4% | Jan 28, 2026 | EGroupware is a Web based groupware server written in PHP. A SQL Injection vulnerability exists in the core components o... |
| CVE-2026-1522 | HIGH | 7.5 | 0.7% | Jan 28, 2026 | A weakness has been identified in Open5GS up to 2.7.6. This vulnerability affects the function sgwc_s5c_handle_modify_be... |
| CVE-2026-23553 | LOW | 2.9 | 0.1% | Jan 28, 2026 | In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the pr... |
| CVE-2026-1539 | MEDIUM | 5.8 | 0.2% | Jan 28, 2026 | A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended de... |
| CVE-2026-1536 | MEDIUM | 5.3 | 0.3% | Jan 28, 2026 | A flaw was found in libsoup. An attacker who can control the input for the Content-Disposition header can inject CRLF (C... |
| CVE-2026-23014 | MEDIUM | 5.5 | 0.1% | Jan 28, 2026 | In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed ... |
| CVE-2026-1521 | HIGH | 7.5 | 0.5% | Jan 28, 2026 | A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwc_s5c_handle_bearer_resource_fa... |
| CVE-2026-1520 | LOW | 2.4 | 0.2% | Jan 28, 2026 | A vulnerability was identified in rethinkdb up to 2.4.3. Affected by this issue is some unknown functionality of the com... |
| CVE-2026-1237 | LOW | 2.1 | 0.1% | Jan 28, 2026 | Vulnerable cross-model authorization in juju. If a charm's cross-model permissions are revoked or expire, a malicious us... |
| CVE-2026-1060 | MEDIUM | 5.3 | 0.2% | Jan 28, 2026 | The WP Adminify plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin... |
| CVE-2026-1056 | CRITICAL | 9.8 | 12.0% | Jan 28, 2026 | The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path valida... |
| CVE-2026-1399 | MEDIUM | 4.4 | 0.2% | Jan 28, 2026 | The WP Google Ad Manager Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in ... |
| CVE-2026-1398 | MEDIUM | 4.3 | 0.1% | Jan 28, 2026 | The Change WP URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,... |
| CVE-2026-1391 | MEDIUM | 5.3 | 0.3% | Jan 28, 2026 | The Vzaar Media Management plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, a... |
| CVE-2026-1380 | MEDIUM | 4.3 | 0.1% | Jan 28, 2026 | The Bitcoin Donate Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in... |
| CVE-2026-1377 | MEDIUM | 4.3 | 0.1% | Jan 28, 2026 | The imwptip plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. ... |
| CVE-2026-1280 | HIGH | 7.5 | 0.3% | Jan 28, 2026 | The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability ch... |
| CVE-2026-0844 | HIGH | 8.8 | 0.3% | Jan 28, 2026 | The Simple User Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including... |
| CVE-2026-0483 | MEDIUM | 6.9 | 0.2% | Jan 28, 2026 | Stored Cross-Site Scripting (XSS) vulnerability in the PDF file upload functionality of Live Helper Chat, versions prior... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now