2026 CVE Vulnerabilities
85,257 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23878 | MEDIUM | 6.5 | 0.3% | Jan 19, 2026 | HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ce... |
| CVE-2026-23845 | HIGH | 7.5 | 0.4% | Jan 19, 2026 | Mailpit is an email testing tool and API for developers. Versions prior to 1.28.3 are vulnerable to Server-Side Request ... |
| CVE-2026-23843 | HIGH | 7.1 | 0.2% | Jan 19, 2026 | teklifolustur_app is a web-based PHP application that allows users to create, manage, and track quotes for their clients... |
| CVE-2026-23842 | HIGH | 7.5 | 0.5% | Jan 19, 2026 | ChatterBot is a machine learning, conversational dialog engine for creating chat bots. ChatterBot versions up to 1.2.10 ... |
| CVE-2026-23841 | MEDIUM | 6.1 | 0.2% | Jan 19, 2026 | Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, a... |
| CVE-2026-23840 | MEDIUM | 6.1 | 0.2% | Jan 19, 2026 | Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, a... |
| CVE-2026-23839 | MEDIUM | 6.1 | 0.3% | Jan 19, 2026 | Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, a... |
| CVE-2026-23838 | HIGH | 8.7 | 0.4% | Jan 19, 2026 | Tandoor Recipes is a recipe manager than can be installed with the Nix package manager. Starting in version 23.05 and pr... |
| CVE-2026-1172 | HIGH | 7.5 | 0.5% | Jan 19, 2026 | A vulnerability has been found in birkir prime up to 0.4.0.beta.0. The affected element is an unknown function of the fi... |
| CVE-2026-1171 | HIGH | 7.5 | 0.5% | Jan 19, 2026 | A flaw has been found in birkir prime up to 0.4.0.beta.0. Impacted is an unknown function of the file /graphql of the co... |
| CVE-2026-23884 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, offscreen bitmap deletion leav... |
| CVE-2026-23883 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, `xf_Pointer_New` frees `cursor... |
| CVE-2026-23836 | HIGH | 8.8 | 0.4% | Jan 19, 2026 | HotCRP is conference review software. A problem introduced in April 2024 in version 3.1 led to inadequately sanitized co... |
| CVE-2026-23833 | HIGH | 7.5 | 0.3% | Jan 19, 2026 | ESPHome is a system to control microcontrollers remotely through Home Automation systems. In versions 2025.9.0 through 2... |
| CVE-2026-23732 | HIGH | 7.5 | 0.5% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, FastGlyph parsing trusts `cbDa... |
| CVE-2026-23721 | MEDIUM | 4.3 | 0.2% | Jan 19, 2026 | OpenProject is an open-source, web-based project management software. When using groups in OpenProject to manage users, ... |
| CVE-2026-23646 | MEDIUM | 6.5 | 0.3% | Jan 19, 2026 | OpenProject is an open-source, web-based project management software. Users of OpenProject versions prior to 16.6.5 and ... |
| CVE-2026-23625 | MEDIUM | 5.4 | 0.2% | Jan 19, 2026 | OpenProject is an open-source, web-based project management software. Versions 16.3.0 through 16.6.4 are affected by a s... |
| CVE-2026-23534 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer over... |
| CVE-2026-23533 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer over... |
| CVE-2026-22797 | CRITICAL | 9.9 | 0.6% | Jan 19, 2026 | An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, an... |
| CVE-2026-1170 | MEDIUM | 5.5 | 0.4% | Jan 19, 2026 | A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file ... |
| CVE-2026-1169 | HIGH | 8.8 | 0.2% | Jan 19, 2026 | A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0. This vulnerability affects unknown code. ... |
| CVE-2026-23532 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer over... |
| CVE-2026-23531 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec, when `glyphData... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now