2026 CVE Vulnerabilities
85,248 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-0779 | HIGH | 8.8 | 1.5% | Jan 23, 2026 | ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote ... |
| CVE-2026-0778 | HIGH | 8.8 | 0.6% | Jan 23, 2026 | Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2026-0776 | HIGH | 7.3 | 0.4% | Jan 23, 2026 | Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows loca... |
| CVE-2026-0775 | HIGH | 7 | 0.3% | Jan 23, 2026 | npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attack... |
| CVE-2026-0774 | HIGH | 8.8 | 0.7% | Jan 23, 2026 | WatchYourLAN Configuration Page Argument Injection Remote Code Execution Vulnerability. This vulnerability allows networ... |
| CVE-2026-0773 | CRITICAL | 9.8 | 1.1% | Jan 23, 2026 | Upsonic Cloudpickle Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows rem... |
| CVE-2026-0772 | HIGH | 7.5 | 0.9% | Jan 23, 2026 | Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows rem... |
| CVE-2026-0771 | HIGH | 7.1 | 0.6% | Jan 23, 2026 | Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers t... |
| CVE-2026-0770 | CRITICAL | 9.8 | 10.4% | Jan 23, 2026 | Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This... |
| CVE-2026-0769 | CRITICAL | 9.8 | 33.8% | Jan 23, 2026 | Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote... |
| CVE-2026-0768 | CRITICAL | 9.8 | 2.0% | Jan 23, 2026 | Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ... |
| CVE-2026-0767 | — | — | 0.3% | Jan 23, 2026 | Rejected reason: Open WebU's investigation showed that this describes the behavior of plain HTTP rather than a defect in... |
| CVE-2026-0766 | — | — | 26.0% | Jan 23, 2026 | Rejected reason: Open WebU's investigation further investigation showed that this is intended functionality of the Plugi... |
| CVE-2026-0765 | — | — | 1.6% | Jan 23, 2026 | Rejected reason: Open WebU's investigation further investigation showed that this is intended functionality of the Plug... |
| CVE-2026-0764 | CRITICAL | 9.8 | 1.0% | Jan 23, 2026 | GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows rem... |
| CVE-2026-0763 | CRITICAL | 9.8 | 1.0% | Jan 23, 2026 | GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability. This ... |
| CVE-2026-0762 | HIGH | 8.1 | 0.7% | Jan 23, 2026 | GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allow... |
| CVE-2026-0761 | CRITICAL | 9.8 | 1.1% | Jan 23, 2026 | Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability. This vulnerabi... |
| CVE-2026-0760 | CRITICAL | 9.8 | 1.0% | Jan 23, 2026 | Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability. Thi... |
| CVE-2026-0759 | CRITICAL | 9.8 | 1.7% | Jan 23, 2026 | Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability. This vulner... |
| CVE-2026-0758 | HIGH | 7.8 | 0.7% | Jan 23, 2026 | mcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability. This vulnerability allows l... |
| CVE-2026-0757 | HIGH | 8.8 | 1.3% | Jan 23, 2026 | MCP Manager for Claude Desktop execute-command Command Injection Sandbox Escape Vulnerability. This vulnerability allows... |
| CVE-2026-0756 | CRITICAL | 9.8 | 1.8% | Jan 23, 2026 | github-kanban-mcp-server execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remo... |
| CVE-2026-0755 | CRITICAL | 9.8 | 3.3% | Jan 23, 2026 | gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attack... |
| CVE-2026-0710 | HIGH | 8.4 | 0.2% | Jan 23, 2026 | A flaw was found in SIPp. A remote attacker could exploit this by sending specially crafted Session Initiation Protocol ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now