2026 CVE Vulnerabilities
85,245 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24871 | CRITICAL | 10 | 0.3% | Jan 27, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in pilgrimage233 Minecraft-Rcon-Manage.This issu... |
| CVE-2026-24870 | HIGH | 7.5 | 0.2% | Jan 27, 2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ixray-team ixray-1.6-stcop.This issue affect... |
| CVE-2026-24869 | HIGH | 8.8 | 0.2% | Jan 27, 2026 | Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 147.0.2. |
| CVE-2026-24868 | MEDIUM | 6.5 | 0.2% | Jan 27, 2026 | Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 147.0.2. |
| CVE-2026-24832 | CRITICAL | 9.8 | 0.3% | Jan 27, 2026 | Out-of-bounds Write vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3. |
| CVE-2026-24831 | HIGH | 7.5 | 0.3% | Jan 27, 2026 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ixray-team ixray-1.6-stcop.This issue affects ix... |
| CVE-2026-22796 | MEDIUM | 5.3 | 0.5% | Jan 27, 2026 | Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_T... |
| CVE-2026-22795 | MEDIUM | 5.5 | 0.1% | Jan 27, 2026 | Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. ... |
| CVE-2026-0648 | MEDIUM | 6.3 | 0.1% | Jan 27, 2026 | The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_... |
| CVE-2026-1489 | MEDIUM | 5.4 | 0.3% | Jan 27, 2026 | A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to me... |
| CVE-2026-1470 | CRITICAL | 9.9 | 18.1% | Jan 27, 2026 | n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressi... |
| CVE-2026-1485 | LOW | 2.8 | 0.1% | Jan 27, 2026 | A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of ... |
| CVE-2026-1484 | MEDIUM | 4.2 | 0.3% | Jan 27, 2026 | A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of inte... |
| CVE-2026-1213 | MEDIUM | 4.3 | 0.3% | Jan 27, 2026 | All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modif... |
| CVE-2026-24830 | CRITICAL | 9.8 | 0.3% | Jan 27, 2026 | Integer Overflow or Wraparound vulnerability in Ralim IronOS.This issue affects IronOS: before v2.23-rc2. |
| CVE-2026-24829 | MEDIUM | 6.5 | 0.2% | Jan 27, 2026 | Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in Is-Daouda is-Engine.This issue affects is-Engine: befor... |
| CVE-2026-24828 | HIGH | 7.5 | 0.3% | Jan 27, 2026 | Missing Release of Memory after Effective Lifetime vulnerability in Is-Daouda is-Engine.This issue affects is-Engine: be... |
| CVE-2026-24827 | HIGH | 7.5 | 0.3% | Jan 27, 2026 | Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs... |
| CVE-2026-24826 | CRITICAL | 10 | 0.3% | Jan 27, 2026 | Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read, Reacha... |
| CVE-2026-24348 | MEDIUM | 6.1 | 0.1% | Jan 27, 2026 | Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execut... |
| CVE-2026-24347 | MEDIUM | 5.3 | 0.2% | Jan 27, 2026 | Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /... |
| CVE-2026-24346 | CRITICAL | 9.1 | 0.2% | Jan 27, 2026 | Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protec... |
| CVE-2026-24345 | HIGH | 8.8 | 0.1% | Jan 27, 2026 | Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization che... |
| CVE-2026-21417 | HIGH | 7.2 | 0.2% | Jan 27, 2026 | Dell CloudBoost Virtual Appliance, versions prior to 19.14.0.0, contains a Plaintext Storage of Password vulnerability. ... |
| CVE-2026-1467 | MEDIUM | 5.3 | 0.3% | Jan 27, 2026 | A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Return Line Feed) Injec... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now