2026 CVE Vulnerabilities
85,248 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23001 | HIGH | 7.8 | 0.2% | Jan 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source... |
| CVE-2026-23000 | MEDIUM | 5.5 | 0.1% | Jan 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback fai... |
| CVE-2026-22999 | MEDIUM | 5.5 | 0.2% | Jan 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: do not free existing class in q... |
| CVE-2026-22998 | HIGH | 7.5 | 0.8% | Jan 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix NULL pointer dereferences in nvmet_tc... |
| CVE-2026-22997 | MEDIUM | 5.5 | 0.5% | Jan 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939_xtp_rx_rts_session_active():... |
| CVE-2026-22996 | MEDIUM | 5.5 | 0.2% | Jan 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devl... |
| CVE-2026-1406 | LOW | 3.5 | 0.2% | Jan 25, 2026 | A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulner... |
| CVE-2026-0593 | MEDIUM | 5.3 | 0.2% | Jan 24, 2026 | The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to unauthorized modification of data due to ... |
| CVE-2026-0862 | MEDIUM | 6.1 | 0.2% | Jan 24, 2026 | The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘options... |
| CVE-2026-0911 | HIGH | 7.5 | 0.5% | Jan 24, 2026 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to arbitrary file uploa... |
| CVE-2026-1302 | MEDIUM | 4.4 | 0.2% | Jan 24, 2026 | The Meta-box GalleryMeta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all ver... |
| CVE-2026-1300 | MEDIUM | 4.4 | 0.2% | Jan 24, 2026 | The Responsive Header plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple plugin settings par... |
| CVE-2026-1266 | MEDIUM | 4.4 | 0.2% | Jan 24, 2026 | The Postalicious plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up... |
| CVE-2026-1208 | MEDIUM | 4.3 | 0.2% | Jan 24, 2026 | The Friendly Functions for Welcart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up t... |
| CVE-2026-1191 | MEDIUM | 4.4 | 0.2% | Jan 24, 2026 | The JavaScript Notifier plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all ver... |
| CVE-2026-1189 | MEDIUM | 6.4 | 0.2% | Jan 24, 2026 | The LeadBI Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_id' para... |
| CVE-2026-1127 | MEDIUM | 6.1 | 0.2% | Jan 24, 2026 | The Timeline Event History plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `id` parameter i... |
| CVE-2026-1098 | MEDIUM | 6.4 | 0.2% | Jan 24, 2026 | The CM CSS Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' shortcode attribute i... |
| CVE-2026-0800 | HIGH | 7.2 | 0.2% | Jan 24, 2026 | The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored ... |
| CVE-2026-0687 | MEDIUM | 4.3 | 0.2% | Jan 24, 2026 | The Meta-box GalleryMeta plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi... |
| CVE-2026-0633 | LOW | 3.7 | 0.2% | Jan 24, 2026 | The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sens... |
| CVE-2026-1257 | HIGH | 7.5 | 0.7% | Jan 24, 2026 | The Administrative Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and incl... |
| CVE-2026-1103 | MEDIUM | 5.4 | 0.2% | Jan 24, 2026 | The AIKTP plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on... |
| CVE-2026-1099 | MEDIUM | 6.4 | 0.2% | Jan 24, 2026 | The Administrative Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'login' and 'log... |
| CVE-2026-1097 | MEDIUM | 6.4 | 0.2% | Jan 24, 2026 | The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site S... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now