2026 CVE Vulnerabilities

85,257 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-1146MEDIUM5.4A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affect...
CVE-2026-1145HIGH8.8A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function js_typed_array_...
CVE-2026-1144HIGH8.8A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c o...
CVE-2026-1143HIGH8.8A weakness has been identified in TOTOLINK A3700R 9.1.2u.5822_B20200513. This affects the function setWiFiEasyGuestCfg o...
CVE-2026-1142MEDIUM6.5A security flaw has been discovered in PHPGurukul News Portal 1.0. The impacted element is an unknown function. Performi...
CVE-2026-1141HIGH8.8A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /a...
CVE-2026-1140HIGH8.8A vulnerability was found in UTT 进取 520W 1.7.7-180627. This issue affects the function strcpy of the file /goform/Config...
CVE-2026-1139HIGH8.8A vulnerability has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /...
CVE-2026-1138HIGH8.8A flaw has been found in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/ConfigExceptQQ. ...
CVE-2026-1137HIGH8.8A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /gof...
CVE-2026-1136LOW3.5A weakness has been identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. Affected is the functio...
CVE-2026-1135MEDIUM6.1A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of t...
CVE-2026-1134MEDIUM6.1A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown function of the fi...
CVE-2026-0943HIGH7.5HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability...
CVE-2026-1133CRITICAL9.8A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.j...
CVE-2026-1132CRITICAL9.8A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /kmf/edit_folder.j...
CVE-2026-1131CRITICAL9.8A vulnerability has been found in Yonyou KSOA 9.0. Impacted is an unknown function of the file /kmc/save_catalog.jsp of ...
CVE-2026-1130CRITICAL9.8A flaw has been found in Yonyou KSOA 9.0. This issue affects some unknown processing of the file /worksheet/worksadd_pla...
CVE-2026-1129CRITICAL9.8A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/worksadd...
CVE-2026-23829MEDIUM5.3Mailpit is an email testing tool and API for developers. Prior to version 1.28.3, Mailpit's SMTP server is vulnerable to...
CVE-2026-23733MEDIUM6.4LobeChat is an open source chat application platform. Prior to version 2.0.0-next.180, a stored Cross-Site Scripting (XS...
CVE-2026-23644HIGH7.5esm.sh is a no-build content delivery network (CDN) for web development. Prior to Go pseeudoversion 0.0.0-20260116051925...
CVE-2026-23626MEDIUM6.8Kimai is a web-based multi-user time-tracking application. Prior to version 2.46.0, Kimai's export functionality uses a ...
CVE-2026-23525HIGH8.41Panel is an open-source, web-based control panel for Linux server management. A stored Cross-Site Scripting (XSS) vulne...
CVE-2026-1126MEDIUM6.3A security vulnerability has been detected in lwj flow up to a3d2fe8133db9d3b50fda4f66f68634640344641. This affects the ...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now