2026 CVE Vulnerabilities
85,257 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1328 | HIGH | 8.8 | 0.8% | Jan 22, 2026 | A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the fil... |
| CVE-2026-1327 | HIGH | 8.8 | 2.6% | Jan 22, 2026 | A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function se... |
| CVE-2026-1326 | HIGH | 8.8 | 3.2% | Jan 22, 2026 | A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. This vulnerability affects the function setWan... |
| CVE-2026-1325 | CRITICAL | 9.8 | 0.5% | Jan 22, 2026 | A security flaw has been discovered in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This a... |
| CVE-2026-1324 | CRITICAL | 9.8 | 6.4% | Jan 22, 2026 | A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this iss... |
| CVE-2026-1102 | HIGH | 7.5 | 0.5% | Jan 22, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.6.4, 18.7 before 18.7.2, and 1... |
| CVE-2026-0723 | HIGH | 7.4 | 0.8% | Jan 22, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 1... |
| CVE-2026-1332 | MEDIUM | 6.9 | 0.4% | Jan 22, 2026 | MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote ... |
| CVE-2026-1225 | LOW | 1.8 | 0.2% | Jan 22, 2026 | ACE vulnerability in configuration file processing by QOS.CH logback-core up to and including version 1.5.24 in Java ap... |
| CVE-2026-1331 | CRITICAL | 9.8 | 0.7% | Jan 22, 2026 | MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote ... |
| CVE-2026-1330 | HIGH | 8.7 | 0.6% | Jan 22, 2026 | MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote at... |
| CVE-2026-24332 | MEDIUM | 4.3 | 0.3% | Jan 22, 2026 | Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible (and not actual... |
| CVE-2026-0920 | CRITICAL | 9.8 | 1.1% | Jan 22, 2026 | The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versio... |
| CVE-2026-24049 | MEDIUM | 5.5 | 0.3% | Jan 22, 2026 | wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46... |
| CVE-2026-24055 | MEDIUM | 5.3 | 0.4% | Jan 22, 2026 | Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/sla... |
| CVE-2026-24042 | CRITICAL | 9.8 | 0.6% | Jan 22, 2026 | Appsmith is a platform to build admin panels, internal tools, and dashboards. In versions 1.94 and below, publicly acces... |
| CVE-2026-24039 | MEDIUM | 4.3 | 0.2% | Jan 22, 2026 | Horilla is a free and open source Human Resource Management System (HRMS). Version 1.4.0 has Improper Access Control, al... |
| CVE-2026-24038 | HIGH | 8.1 | 0.4% | Jan 22, 2026 | Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the OTP handling logic has ... |
| CVE-2026-24037 | MEDIUM | 5.4 | 0.2% | Jan 22, 2026 | Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the has_xss() function atte... |
| CVE-2026-24036 | MEDIUM | 5.3 | 0.5% | Jan 22, 2026 | Horilla is a free and open source Human Resource Management System (HRMS). Versions 1.4.0 and above expose unpublished j... |
| CVE-2026-24035 | MEDIUM | 4.3 | 0.3% | Jan 22, 2026 | Horilla is a free and open source Human Resource Management System (HRMS). An Improper Access Control vulnerability exis... |
| CVE-2026-24034 | MEDIUM | 5.4 | 0.2% | Jan 22, 2026 | Horilla is a free and open source Human Resource Management System (HRMS). In versions prior to 1.5.0, a cross-site scri... |
| CVE-2026-24010 | HIGH | 8 | 0.4% | Jan 22, 2026 | Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versi... |
| CVE-2026-24006 | HIGH | 7.5 | 0.4% | Jan 22, 2026 | Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versio... |
| CVE-2026-24002 | CRITICAL | 9.6 | 0.5% | Jan 22, 2026 | Grist is spreadsheet software using Python as its formula language. Grist offers several methods for running those formu... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now