2026 CVE Vulnerabilities
85,248 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24803 | CRITICAL | 9.2 | 0.3% | Jan 27, 2026 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in coolsnowwolf lede (package/lean/mt/drivers/mt761... |
| CVE-2026-24802 | MEDIUM | 5.3 | 0.4% | Jan 27, 2026 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in briandilley jsonrpc4j (src/main/java/com/googlec... |
| CVE-2026-24801 | MEDIUM | 6.9 | 0.2% | Jan 27, 2026 | Vulnerability in Ralim IronOS (source/Core/BSP/Pinecilv2/bl_mcu_sdk/components/ble/ble_stack/common/tinycrypt/source mod... |
| CVE-2026-24800 | CRITICAL | 10 | 0.3% | Jan 27, 2026 | Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow ... |
| CVE-2026-24799 | MEDIUM | 5.2 | 0.1% | Jan 27, 2026 | Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in davisking d... |
| CVE-2026-24798 | CRITICAL | 9.3 | 0.3% | Jan 27, 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GaijinEntertainment DagorEngine... |
| CVE-2026-24797 | MEDIUM | 6.9 | 0.3% | Jan 27, 2026 | Out-of-bounds Write vulnerability in neka-nat cupoch (third_party/libjpeg-turbo/libjpeg-turbo modules). This vulnerabili... |
| CVE-2026-24796 | MEDIUM | 6.9 | 0.1% | Jan 27, 2026 | Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Onigu... |
| CVE-2026-24795 | MEDIUM | 5.1 | 0.1% | Jan 27, 2026 | Out-of-bounds Write vulnerability in CloverHackyColor CloverBootloader (MdeModulePkg/Universal/RegularExpressionDxe/Onig... |
| CVE-2026-24794 | CRITICAL | 9.2 | 0.3% | Jan 27, 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in CardboardPowered cardboard (src... |
| CVE-2026-24793 | CRITICAL | 9.8 | 0.3% | Jan 27, 2026 | Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in azerothcore... |
| CVE-2026-24344 | HIGH | 7.3 | 0.2% | Jan 27, 2026 | Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and ... |
| CVE-2026-21721 | HIGH | 8.1 | 0.6% | Jan 27, 2026 | The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* ac... |
| CVE-2026-21720 | HIGH | 7.5 | 0.6% | Jan 27, 2026 | Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10... |
| CVE-2026-1465 | HIGH | 8.7 | 0.1% | Jan 27, 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in anyrtcIO-Community anyRTC-RTMP-... |
| CVE-2026-1464 | MEDIUM | 4.6 | 0.1% | Jan 27, 2026 | Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager (app/src/main/java/org/apache/commons/compress/... |
| CVE-2026-21408 | HIGH | 7.3 | 0.1% | Jan 27, 2026 | beat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely... |
| CVE-2026-1361 | CRITICAL | 9.8 | 0.5% | Jan 27, 2026 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
| CVE-2026-24686 | MEDIUM | 4.7 | 0.2% | Jan 27, 2026 | go-tuf is a Go implementation of The Update Framework (TUF). go-tuf's TAP 4 Multirepo Client uses the map file repositor... |
| CVE-2026-24490 | MEDIUM | 4.8 | 0.3% | Jan 27, 2026 | MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting (XSS) vu... |
| CVE-2026-24489 | MEDIUM | 5.3 | 0.4% | Jan 27, 2026 | Gakido is a Python HTTP client focused on browser impersonation and anti-bot evasion. A vulnerability was discovered in ... |
| CVE-2026-24486 | HIGH | 7.5 | 2.2% | Jan 27, 2026 | Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exi... |
| CVE-2026-24480 | HIGH | 8.7 | 0.4% | Jan 27, 2026 | QGIS is a free, open source, cross platform geographical information system (GIS) The repository contains a GitHub Actio... |
| CVE-2026-24479 | CRITICAL | 9.8 | 7.9% | Jan 27, 2026 | HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. Prior to version 26.0... |
| CVE-2026-23683 | MEDIUM | 4.3 | 0.2% | Jan 27, 2026 | SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated u... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now