2026 CVE Vulnerabilities
85,248 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24437 | MEDIUM | 5.5 | 0.2% | Jan 26, 2026 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content wi... |
| CVE-2026-24436 | CRITICAL | 9.8 | 0.4% | Jan 26, 2026 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) do not enforce rate limiting or account l... |
| CVE-2026-24435 | MEDIUM | 6.5 | 0.2% | Jan 26, 2026 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) implement an insecure Cross-Origin Resour... |
| CVE-2026-24433 | MEDIUM | 5.4 | 0.2% | Jan 26, 2026 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain a stored cross-site scripting vul... |
| CVE-2026-24432 | MEDIUM | 4.3 | 0.1% | Jan 26, 2026 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) lack cross-site request forgery (CSRF) pr... |
| CVE-2026-24431 | MEDIUM | 6.5 | 0.2% | Jan 26, 2026 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user account passwords in ... |
| CVE-2026-24430 | HIGH | 7.5 | 0.2% | Jan 26, 2026 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) disclose sensitive account credentials in... |
| CVE-2026-24429 | CRITICAL | 9.8 | 0.4% | Jan 26, 2026 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a predefined default password f... |
| CVE-2026-24428 | HIGH | 8.8 | 0.3% | Jan 26, 2026 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain an authorization flaw in the user... |
| CVE-2026-21509 | HIGH | 7.8 | 72.2% | Jan 26, 2026 | Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a secu... |
| CVE-2026-1446 | MEDIUM | 5 | 0.1% | Jan 26, 2026 | There is a Cross‑Site Scripting (XSS) issue in Esri ArcGIS Pro versions 3.6.0 and earlier. ArcGIS Pro is a desktop appli... |
| CVE-2026-1224 | MEDIUM | 6.5 | 0.3% | Jan 26, 2026 | Tanium addressed an uncontrolled resource consumption vulnerability in Discover. |
| CVE-2026-0925 | MEDIUM | 4.9 | 0.4% | Jan 26, 2026 | Tanium addressed an improper input validation vulnerability in Discover. |
| CVE-2026-1284 | HIGH | 7.8 | 0.3% | Jan 26, 2026 | An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLI... |
| CVE-2026-1283 | HIGH | 7.8 | 0.2% | Jan 26, 2026 | A Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Releas... |
| CVE-2026-24656 | LOW | 3.7 | 0.7% | Jan 26, 2026 | Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes th... |
| CVE-2026-1429 | MEDIUM | 5.4 | 0.2% | Jan 26, 2026 | Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authen... |
| CVE-2026-1428 | HIGH | 8.8 | 1.3% | Jan 26, 2026 | Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated re... |
| CVE-2026-1427 | HIGH | 8.8 | 1.3% | Jan 26, 2026 | Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated re... |
| CVE-2026-1425 | MEDIUM | 6.3 | 0.4% | Jan 26, 2026 | A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function _dns_decode_r... |
| CVE-2026-1424 | HIGH | 7.2 | 0.4% | Jan 26, 2026 | A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic ... |
| CVE-2026-1423 | CRITICAL | 9.8 | 0.4% | Jan 26, 2026 | A vulnerability was determined in code-projects Online Examination System 1.0. Affected by this issue is some unknown fu... |
| CVE-2026-1422 | CRITICAL | 9.8 | 0.5% | Jan 26, 2026 | A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown f... |
| CVE-2026-1421 | MEDIUM | 5.4 | 0.3% | Jan 26, 2026 | A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the co... |
| CVE-2026-1420 | CRITICAL | 9.8 | 3.5% | Jan 26, 2026 | A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /goform/WifiExtraSet. This... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now