2026 CVE Vulnerabilities
85,248 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24401 | MEDIUM | 6.5 | 0.3% | Jan 24, 2026 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions... |
| CVE-2026-24407 | HIGH | 8.8 | 0.4% | Jan 24, 2026 | iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers... |
| CVE-2026-24406 | HIGH | 8.8 | 0.5% | Jan 24, 2026 | iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers... |
| CVE-2026-24405 | HIGH | 8.8 | 0.5% | Jan 24, 2026 | iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers... |
| CVE-2026-24404 | HIGH | 8.8 | 0.4% | Jan 24, 2026 | iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In v... |
| CVE-2026-24403 | HIGH | 8.8 | 0.4% | Jan 24, 2026 | iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. In v... |
| CVE-2026-24402 | — | — | — | Jan 24, 2026 | Rejected reason: GitHub cannot issue a CVE for this Security Advisory because this advisory includes information about m... |
| CVE-2026-24399 | MEDIUM | 5.4 | 0.3% | Jan 24, 2026 | ChatterMate is a no-code AI chatbot agent framework. In versions 1.0.8 and below, the chatbot accepts and executes malic... |
| CVE-2026-22586 | CRITICAL | 9.8 | 0.6% | Jan 24, 2026 | Hard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Pr... |
| CVE-2026-22585 | CRITICAL | 9.8 | 0.4% | Jan 24, 2026 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, For... |
| CVE-2026-22583 | CRITICAL | 9.8 | 0.7% | Jan 24, 2026 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing... |
| CVE-2026-22582 | CRITICAL | 9.8 | 0.7% | Jan 24, 2026 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Salesforce Marketing... |
| CVE-2026-24474 | MEDIUM | 5.3 | 0.4% | Jan 24, 2026 | Dioxus Components is a shadcn-style component library for the Dioxus app framework. Prior to commit 41e4242ecb1062d04ae4... |
| CVE-2026-24140 | MEDIUM | 5.3 | 0.3% | Jan 24, 2026 | MyTube is a self-hosted downloader and player for several video websites. Versions 1.7.78 and below have a Mass Assignme... |
| CVE-2026-24139 | MEDIUM | 6.5 | 0.3% | Jan 24, 2026 | MyTube is a self-hosted downloader and player for several video websites. Versions 1.7.78 and below do not safeguard aga... |
| CVE-2026-24136 | HIGH | 7.5 | 0.4% | Jan 24, 2026 | Saleor is an e-commerce platform. Versions 3.2.0 through 3.20.109, 3.21.0-a.0 through 3.21.44 and 3.22.0-a.0 through 3.2... |
| CVE-2026-24128 | MEDIUM | 6.1 | 0.5% | Jan 24, 2026 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 7.0-mi... |
| CVE-2026-24127 | MEDIUM | 6.1 | 0.3% | Jan 23, 2026 | Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Sc... |
| CVE-2026-0991 | — | — | — | Jan 23, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-1386 | MEDIUM | 6 | 0.2% | Jan 23, 2026 | A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on L... |
| CVE-2026-21867 | — | — | — | Jan 23, 2026 | Rejected reason: Reason: This candidate was issued in error. |
| CVE-2026-24423 | CRITICAL | 9.8 | 87.7% | Jan 23, 2026 | SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in ... |
| CVE-2026-1299 | MEDIUM | 6 | 0.6% | Jan 23, 2026 | The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when seria... |
| CVE-2026-22995 | HIGH | 7.8 | 0.1% | Jan 23, 2026 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublk_partition_scan_wor... |
| CVE-2026-22994 | MEDIUM | 5.5 | 0.1% | Jan 23, 2026 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference count leak in bpf_prog_test_run_... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now