2026 CVE Vulnerabilities
85,257 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24001 | HIGH | 7.5 | 0.6% | Jan 22, 2026 | jsdiff is a JavaScript text differencing implementation. Prior to versions 8.0.3, 5.2.2, 4.0.4, and 3.5.1, attempting to... |
| CVE-2026-23992 | HIGH | 7.5 | 0.2% | Jan 22, 2026 | go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to version 2.3.1, a com... |
| CVE-2026-23991 | HIGH | 7.5 | 0.5% | Jan 22, 2026 | go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to version 2.3.1, if th... |
| CVE-2026-23967 | HIGH | 7.5 | 0.2% | Jan 22, 2026 | sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature mal... |
| CVE-2026-23966 | CRITICAL | 9.1 | 0.2% | Jan 22, 2026 | sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key r... |
| CVE-2026-23965 | HIGH | 7.5 | 0.2% | Jan 22, 2026 | sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature for... |
| CVE-2026-23964 | MEDIUM | 5.4 | 0.2% | Jan 22, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.5.5, 4.4.12, and 4.3.18,... |
| CVE-2026-23963 | MEDIUM | 6.5 | 0.3% | Jan 22, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.5.5, 4.4.12, and 4.3.18,... |
| CVE-2026-23962 | HIGH | 7.5 | 0.5% | Jan 22, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, a... |
| CVE-2026-23959 | MEDIUM | 4.9 | 0.4% | Jan 22, 2026 | CoreShop is a Pimcore enhanced eCommerce solution. An error-based SQL Injection vulnerability was identified in versions... |
| CVE-2026-23961 | MEDIUM | 5.3 | 0.4% | Jan 22, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to sus... |
| CVE-2026-23958 | CRITICAL | 9.8 | 0.5% | Jan 22, 2026 | Dataease is an open source data visualization analysis tool. Prior to version 2.10.19, DataEase uses the MD5 hash of the... |
| CVE-2026-23957 | HIGH | 7.5 | 0.4% | Jan 22, 2026 | seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versio... |
| CVE-2026-23956 | HIGH | 7.5 | 0.5% | Jan 22, 2026 | seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versio... |
| CVE-2026-23699 | HIGH | 8.6 | 1.5% | Jan 22, 2026 | AP180 series with firmware versions prior to AP_RGOS 11.9(4)B1P8 contains an OS command injection vulnerability. If this... |
| CVE-2026-23952 | HIGH | 7.5 | 0.4% | Jan 22, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and belo... |
| CVE-2026-23951 | MEDIUM | 5.5 | 0.2% | Jan 22, 2026 | SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that on... |
| CVE-2026-23946 | MEDIUM | 6.8 | 0.7% | Jan 22, 2026 | Tendenci is an open source content management system built for non-profits, associations and cause-based sites. Versions... |
| CVE-2026-23893 | MEDIUM | 6.8 | 0.2% | Jan 22, 2026 | openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to sym... |
| CVE-2026-23887 | MEDIUM | 5.4 | 0.2% | Jan 22, 2026 | Group-Office is an enterprise customer relationship management and groupware tool. In versions 6.8.148 and below, and 25... |
| CVE-2026-23873 | CRITICAL | 9 | 0.5% | Jan 22, 2026 | hustoj is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. All versions are vuln... |
| CVE-2026-1036 | MEDIUM | 5.3 | 0.2% | Jan 22, 2026 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to unauthorized modificati... |
| CVE-2026-24048 | LOW | 3.7 | 0.2% | Jan 21, 2026 | Backstage is an open framework for building developer portals, and @backstage/backend-defaults provides the default impl... |
| CVE-2026-24047 | MEDIUM | 6.3 | 0.4% | Jan 21, 2026 | Backstage is an open framework for building developer portals, and @backstage/cli-common provides config loading functio... |
| CVE-2026-24046 | HIGH | 7.1 | 0.5% | Jan 21, 2026 | Backstage is an open framework for building developer portals. Multiple Scaffolder actions and archive extraction utilit... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now