2026 CVE Vulnerabilities
85,257 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-0834 | HIGH | 8.8 | 0.4% | Jan 21, 2026 | Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticat... |
| CVE-2026-20109 | MEDIUM | 4.8 | 0.2% | Jan 21, 2026 | Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE... |
| CVE-2026-20092 | MEDIUM | 6 | 0.1% | Jan 21, 2026 | A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, l... |
| CVE-2026-20080 | MEDIUM | 5.3 | 0.3% | Jan 21, 2026 | A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticat... |
| CVE-2026-20055 | MEDIUM | 4.8 | 0.2% | Jan 21, 2026 | Multiple vulnerabilities in the web-based management interface of Cisco Packaged Contact Center Enterprise (Packaged CCE... |
| CVE-2026-20045 | CRITICAL | 9.8 | 4.3% | Jan 21, 2026 | A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Manag... |
| CVE-2026-1290 | MEDIUM | 5.3 | 0.3% | Jan 21, 2026 | Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Ja... |
| CVE-2026-22977 | MEDIUM | 5.5 | 0.2% | Jan 21, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: sock: fix hardened usercopy panic in sock_recv... |
| CVE-2026-22444 | HIGH | 7.1 | 0.7% | Jan 21, 2026 | The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which ... |
| CVE-2026-22022 | HIGH | 8.2 | 0.5% | Jan 21, 2026 | Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to ... |
| CVE-2026-0988 | LOW | 3.7 | 0.4% | Jan 21, 2026 | A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() functi... |
| CVE-2026-0663 | MEDIUM | 4.9 | 0.4% | Jan 21, 2026 | Denial-of-service vulnerability in M-Files Server versions before 26.1.15632.3 allows an authenticated attacker with vau... |
| CVE-2026-24016 | HIGH | 8.4 | 0.1% | Jan 21, 2026 | The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libra... |
| CVE-2026-24061 | CRITICAL | 9.8 | 99.0% | Jan 21, 2026 | telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment ... |
| CVE-2026-22976 | MEDIUM | 5.5 | 0.1% | Jan 21, 2026 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix NULL deref when deactivatin... |
| CVE-2026-1035 | LOW | 3.1 | 0.3% | Jan 21, 2026 | A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class responsi... |
| CVE-2026-24026 | — | — | — | Jan 21, 2026 | Rejected reason: Not used |
| CVE-2026-24025 | — | — | — | Jan 21, 2026 | Rejected reason: Not used |
| CVE-2026-24024 | — | — | — | Jan 21, 2026 | Rejected reason: Not used |
| CVE-2026-24023 | — | — | — | Jan 21, 2026 | Rejected reason: Not used |
| CVE-2026-24022 | — | — | — | Jan 21, 2026 | Rejected reason: Not used |
| CVE-2026-24021 | — | — | — | Jan 21, 2026 | Rejected reason: Not used |
| CVE-2026-24020 | — | — | — | Jan 21, 2026 | Rejected reason: Not used |
| CVE-2026-0933 | CRITICAL | 9.9 | 1.4% | Jan 20, 2026 | SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The is... |
| CVE-2026-21990 | HIGH | 8.2 | 0.2% | Jan 20, 2026 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now