2026 CVE Vulnerabilities
48,030 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-48042 | HIGH | 7.5 | 0.5% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3,... |
| CVE-2026-47221 | HIGH | 7.5 | 0.4% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9... |
| CVE-2026-47204 | HIGH | 7.5 | 0.4% | Jun 26, 2026 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9... |
| CVE-2026-57518 | HIGH | 8.8 | 0.5% | Jun 26, 2026 | Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage ... |
| CVE-2026-57231 | HIGH | 7.5 | 0.3% | Jun 26, 2026 | Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a container image that contains a environ... |
| CVE-2026-56663 | HIGH | 8.5 | — | Jun 26, 2026 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent... |
| CVE-2026-55677 | HIGH | 7.5 | — | Jun 26, 2026 | Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decodi... |
| CVE-2026-45406 | HIGH | 8.8 | — | Jun 26, 2026 | Dokku is a docker-powered PaaS. Prior to 0.38.2, the openresty-vhosts plugin copies files from an app's openresty/http-i... |
| CVE-2026-45405 | HIGH | 8.8 | — | Jun 26, 2026 | Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:from-archive and certs:add commands extract user-supplied tar/z... |
| CVE-2026-9640 | HIGH | 7.2 | 0.3% | Jun 26, 2026 | A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 reg... |
| CVE-2026-5757 | HIGH | 7.5 | 0.5% | Jun 26, 2026 | Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to ... |
| CVE-2026-47214 | HIGH | 7.1 | 0.2% | Jun 26, 2026 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos... |
| CVE-2026-45195 | HIGH | 7.8 | 0.1% | Jun 26, 2026 | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memor... |
| CVE-2026-44018 | HIGH | 7.1 | 0.1% | Jun 26, 2026 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos... |
| CVE-2026-21734 | HIGH | 7.7 | 0.1% | Jun 26, 2026 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-... |
| CVE-2026-0828 | HIGH | 7.5 | — | Jun 26, 2026 | Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.75.0 and 11.11.4.0, allows unpr... |
| CVE-2026-57667 | HIGH | 8.5 | 0.2% | Jun 26, 2026 | Sales Representative SQL Injection in Groundhogg <= 4.5 versions. |
| CVE-2026-57663 | HIGH | 8.5 | — | Jun 26, 2026 | Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions. |
| CVE-2026-57662 | HIGH | 8.5 | — | Jun 26, 2026 | Contributor SQL Injection in Contest Gallery <= 30.0.0 versions. |
| CVE-2026-57659 | HIGH | 8.8 | — | Jun 26, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions. |
| CVE-2026-57655 | HIGH | 8.2 | — | Jun 26, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions. |
| CVE-2026-57653 | HIGH | 8.5 | — | Jun 26, 2026 | Contributor SQL Injection in WP Job Portal <= 2.5.2 versions. |
| CVE-2026-57647 | HIGH | 7.5 | — | Jun 26, 2026 | Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer <= 1.6.1 versions. |
| CVE-2026-57645 | HIGH | 8.1 | — | Jun 26, 2026 | newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions. |
| CVE-2026-57644 | HIGH | 8.5 | — | Jun 26, 2026 | Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now