2026 CVE Vulnerabilities
85,257 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1193 | HIGH | 8.8 | 0.3% | Jan 19, 2026 | A vulnerability was identified in MineAdmin 1.x/2.x. The impacted element is an unknown function of the file /system/cac... |
| CVE-2026-1192 | HIGH | 7.3 | 6.1% | Jan 19, 2026 | A vulnerability was determined in Tosei Online Store Management System ネット店舗管理システム 1.01. The affected element is an unkn... |
| CVE-2026-1179 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | A vulnerability was detected in Yonyou KSOA 9.0. This affects an unknown part of the file /kmf/user_popedom.jsp of the c... |
| CVE-2026-23944 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to version 1.13.2, unauthent... |
| CVE-2026-23885 | CRITICAL | 9.9 | 0.4% | Jan 19, 2026 | Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3,... |
| CVE-2026-1178 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | A security vulnerability has been detected in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of t... |
| CVE-2026-1177 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | A weakness has been identified in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the fil... |
| CVE-2026-23886 | MEDIUM | 5.3 | 0.4% | Jan 19, 2026 | Swift W3C TraceContext is a Swift implementation of the W3C Trace Context standard, and Swift OTel is an OpenTelemetry P... |
| CVE-2026-23880 | HIGH | 7.3 | 0.2% | Jan 19, 2026 | OnboardLite is a comprehensive membership lifecycle platform built for student organizations at the University of Centra... |
| CVE-2026-23877 | MEDIUM | 4.3 | 0.5% | Jan 19, 2026 | Swing Music is a self-hosted music player for local audio files. Prior to version 2.1.4, Swing Music's `list_folders()` ... |
| CVE-2026-23875 | MEDIUM | 5.4 | 0.2% | Jan 19, 2026 | CrawlChat is an open-source, AI-powered platform that transforms technical documentation into intelligent chatbots. Prio... |
| CVE-2026-23849 | MEDIUM | 5.3 | 0.4% | Jan 19, 2026 | File Browser provides a file managing interface within a specified directory and can be used to upload, delete, preview,... |
| CVE-2026-23848 | MEDIUM | 5.3 | 0.3% | Jan 19, 2026 | MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.7.71, a rate limiting bypas... |
| CVE-2026-23844 | MEDIUM | 4.3 | 0.2% | Jan 19, 2026 | Whisper Money is a personal finance application. Versions prior to 0.1.5 have an insecure direct object reference vulner... |
| CVE-2026-23837 | CRITICAL | 9.8 | 0.6% | Jan 19, 2026 | MyTube is a self-hosted downloader and player for several video websites. A vulnerability present in version 1.7.65 and ... |
| CVE-2026-1176 | CRITICAL | 9.8 | 0.3% | Jan 19, 2026 | A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the... |
| CVE-2026-1175 | HIGH | 7.5 | 0.4% | Jan 19, 2026 | A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql... |
| CVE-2026-23852 | CRITICAL | 9.6 | 0.7% | Jan 19, 2026 | SiYuan is a personal knowledge management system. Versions prior to 3.5.4 have a stored Cross-Site Scripting (XSS) vulne... |
| CVE-2026-23851 | MEDIUM | 6.5 | 0.4% | Jan 19, 2026 | SiYuan is a personal knowledge management system. Versions prior to 3.5.4 contain a logic vulnerability in the /api/file... |
| CVE-2026-23850 | HIGH | 7.5 | 0.5% | Jan 19, 2026 | SiYuan is a personal knowledge management system. In versions prior to 3.5.4, the markdown feature allows unrestricted s... |
| CVE-2026-23847 | MEDIUM | 6.1 | 0.3% | Jan 19, 2026 | SiYuan is a personal knowledge management system. Versions prior to 3.5.4 are vulnerable to reflected cross-site scripti... |
| CVE-2026-23846 | CRITICAL | 9.1 | 0.4% | Jan 19, 2026 | Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password au... |
| CVE-2026-21696 | MEDIUM | 6.5 | 0.5% | Jan 19, 2026 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Starting in version... |
| CVE-2026-1174 | HIGH | 7.5 | 0.7% | Jan 19, 2026 | A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql... |
| CVE-2026-1173 | CRITICAL | 9.8 | 0.7% | Jan 19, 2026 | A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /g... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now