2026 CVE Vulnerabilities
85,257 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23530 | CRITICAL | 9.8 | 0.4% | Jan 19, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0,`freerdp_bitmap_decompress_plan... |
| CVE-2026-23522 | LOW | 3.7 | 0.2% | Jan 19, 2026 | LobeChat is an open source chat application platform. Prior to version 2.0.0-next.193, `knowledgeBase.removeFilesFromKno... |
| CVE-2026-22850 | HIGH | 8.3 | 0.4% | Jan 19, 2026 | Koko Analytics is an open-source analytics plugin for WordPress. Versions prior to 2.1.3 are vulnerable to arbitrary SQL... |
| CVE-2026-22037 | HIGH | 8.4 | 0.3% | Jan 19, 2026 | The @fastify/express plugin adds full Express compatibility to Fastify. A security vulnerability exists in @fastify/expr... |
| CVE-2026-1162 | CRITICAL | 9.8 | 0.7% | Jan 19, 2026 | A flaw has been found in UTT HiPER 810 1.7.4-141218. The impacted element is the function strcpy of the file /goform/set... |
| CVE-2026-22031 | HIGH | 8.8 | 0.5% | Jan 19, 2026 | @fastify/middie is the plugin that adds middleware support on steroids to Fastify. A security vulnerability exists in @f... |
| CVE-2026-1161 | LOW | 3.5 | 0.2% | Jan 19, 2026 | A vulnerability was detected in pbrong hrms 1.0.1. The affected element is the function UpdateRecruitmentById of the fil... |
| CVE-2026-1160 | CRITICAL | 9.8 | 0.3% | Jan 19, 2026 | A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown functio... |
| CVE-2026-21618 | MEDIUM | 6.1 | 0.2% | Jan 19, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in hexpm hexpm... |
| CVE-2026-1159 | CRITICAL | 9.8 | 0.3% | Jan 19, 2026 | A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This issue affects some unknown ... |
| CVE-2026-1158 | HIGH | 8.8 | 0.6% | Jan 19, 2026 | A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. This vulnerability affects the function set... |
| CVE-2026-1007 | HIGH | 7.6 | 0.2% | Jan 19, 2026 | Incorrect Authorization vulnerability in virtual gateway component in Devolutions Server allows attackers to bypass deny... |
| CVE-2026-0610 | CRITICAL | 9.8 | 0.3% | Jan 19, 2026 | SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 thro... |
| CVE-2026-1157 | HIGH | 8.8 | 0.9% | Jan 19, 2026 | A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This affects the function setWiFiEasyCfg of the ... |
| CVE-2026-1156 | HIGH | 8.8 | 0.6% | Jan 19, 2026 | A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309. Affected by this issue is the function setWiFiBa... |
| CVE-2026-1181 | CRITICAL | 9 | 0.3% | Jan 19, 2026 | Altium 365 workspace endpoints were configured with an overly permissive Cross-Origin Resource Sharing (CORS) policy tha... |
| CVE-2026-1155 | HIGH | 8.8 | 0.8% | Jan 19, 2026 | A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Affected by this vulnerability is the function setWiF... |
| CVE-2026-1154 | MEDIUM | 5.4 | 0.3% | Jan 19, 2026 | A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modul... |
| CVE-2026-1153 | MEDIUM | 4.3 | 0.2% | Jan 19, 2026 | A vulnerability was detected in technical-laohu mpay up to 1.2.4. This affects an unknown function. Performing a manipul... |
| CVE-2026-1152 | CRITICAL | 9.8 | 0.3% | Jan 19, 2026 | A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown funct... |
| CVE-2026-1151 | MEDIUM | 5.4 | 0.2% | Jan 19, 2026 | A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the c... |
| CVE-2026-1150 | HIGH | 8.8 | 2.4% | Jan 19, 2026 | A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. Impacted is the function setTracerouteCfg o... |
| CVE-2026-1149 | HIGH | 8.8 | 2.7% | Jan 19, 2026 | A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg ... |
| CVE-2026-1148 | MEDIUM | 6.5 | 0.2% | Jan 19, 2026 | A vulnerability was determined in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This v... |
| CVE-2026-1147 | MEDIUM | 5.4 | 0.2% | Jan 19, 2026 | A vulnerability was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This affect... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now