2026 CVE Vulnerabilities
85,257 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23996 | LOW | 3.7 | 0.3% | Jan 21, 2026 | FastAPI Api Key provides a backend-agnostic library that provides an API key system. Version 1.1.0 has a timing side-cha... |
| CVE-2026-23990 | MEDIUM | 5.3 | 0.3% | Jan 21, 2026 | The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterpr... |
| CVE-2026-23986 | HIGH | 7.1 | 0.2% | Jan 21, 2026 | Copier is a library and CLI app for rendering project templates. Prior to version 9.11.2, Copier suggests that it's safe... |
| CVE-2026-23968 | MEDIUM | 5.5 | 0.2% | Jan 21, 2026 | Copier is a library and CLI app for rendering project templates. Prior to version 9.11.2, Copier suggests that it's safe... |
| CVE-2026-23737 | HIGH | 7.5 | 0.5% | Jan 21, 2026 | seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versio... |
| CVE-2026-23736 | CRITICAL | 9.8 | 0.2% | Jan 21, 2026 | seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versio... |
| CVE-2026-23630 | MEDIUM | 5.4 | 0.2% | Jan 21, 2026 | Docmost is open-source collaborative wiki and documentation software. In versions 0.3.0 through 0.23.2, Mermaid code blo... |
| CVE-2026-23960 | MEDIUM | 5.4 | 0.3% | Jan 21, 2026 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior t... |
| CVE-2026-23526 | HIGH | 8.8 | 0.3% | Jan 21, 2026 | CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.0.0 through 2.54.0... |
| CVE-2026-23524 | CRITICAL | 9.8 | 0.9% | Jan 21, 2026 | Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and belo... |
| CVE-2026-23518 | CRITICAL | 9.8 | 0.2% | Jan 21, 2026 | Fleet is open source device management software. In versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, a vuln... |
| CVE-2026-23517 | HIGH | 8.1 | 0.2% | Jan 21, 2026 | Fleet is open source device management software. A broken access control issue in versions prior to 4.78.3, 4.77.1, 4.76... |
| CVE-2026-23516 | MEDIUM | 5.4 | 0.1% | Jan 21, 2026 | CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.2.0 through 2.54.0... |
| CVE-2026-23499 | MEDIUM | 5.4 | 0.2% | Jan 21, 2026 | Saleor is an e-commerce platform. Starting in version 3.0.0 and prior to versions 3.20.108, 3.21.43, and 3.22.27, Saleor... |
| CVE-2026-22849 | MEDIUM | 4.8 | 0.2% | Jan 21, 2026 | Saleor is an e-commerce platform. Starting in version 3.0.0 and prior to versions 3.20.108, 3.21.43, and 3.22.27, Saleor... |
| CVE-2026-22822 | HIGH | 8.8 | 0.2% | Jan 21, 2026 | External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernete... |
| CVE-2026-22808 | MEDIUM | 5.4 | 0.2% | Jan 21, 2026 | fleetdm/fleet is open source device management software. Prior to versions 4.78.2, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, i... |
| CVE-2026-22807 | CRITICAL | 9.8 | 0.7% | Jan 21, 2026 | vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to versio... |
| CVE-2026-22793 | CRITICAL | 9.6 | 0.6% | Jan 21, 2026 | 5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0... |
| CVE-2026-22792 | CRITICAL | 9.6 | 0.7% | Jan 21, 2026 | 5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0... |
| CVE-2026-22598 | HIGH | 7.1 | 0.3% | Jan 21, 2026 | ManageIQ is an open-source management platform. A flaw was found in the ManageIQ API prior to version radjabov-2 where a... |
| CVE-2026-21852 | HIGH | 7.5 | 23.0% | Jan 21, 2026 | Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed... |
| CVE-2026-23955 | MEDIUM | 4.2 | 0.2% | Jan 21, 2026 | EVerest is an EV charging software stack. Prior to version 2025.9.0, in several places, integer values are concatenated ... |
| CVE-2026-23755 | HIGH | 7.3 | 0.1% | Jan 21, 2026 | D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When ex... |
| CVE-2026-23754 | HIGH | 8.8 | 0.3% | Jan 21, 2026 | D-Link D-View 8 versions 2.0.1.107 and below contain an improper access control vulnerability in backend API endpoints. ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now