2026 CVE Vulnerabilities
85,283 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1049 | MEDIUM | 5.4 | 0.2% | Jan 17, 2026 | A security vulnerability has been detected in LigeroSmart up to 6.1.26. The affected element is an unknown function of t... |
| CVE-2026-1048 | MEDIUM | 5.4 | 0.3% | Jan 17, 2026 | A weakness has been identified in LigeroSmart up to 6.1.26. Impacted is an unknown function of the file /otrs/index.pl?A... |
| CVE-2026-0725 | MEDIUM | 4.4 | 0.2% | Jan 17, 2026 | The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in a... |
| CVE-2026-0833 | MEDIUM | 6.4 | 0.2% | Jan 17, 2026 | The Team Section Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block in all v... |
| CVE-2026-0808 | MEDIUM | 5.3 | 0.3% | Jan 17, 2026 | The Spin Wheel plugin for WordPress is vulnerable to client-side prize manipulation in all versions up to, and including... |
| CVE-2026-0691 | MEDIUM | 4.4 | 0.3% | Jan 17, 2026 | The CM E-Mail Blacklist – Simple email filtering for safer registration plugin for WordPress is vulnerable to Stored Cro... |
| CVE-2026-0820 | MEDIUM | 4.3 | 0.2% | Jan 17, 2026 | The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct O... |
| CVE-2026-0682 | LOW | 2.2 | 0.2% | Jan 17, 2026 | The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including,... |
| CVE-2026-0519 | LOW | 3.4 | 0.1% | Jan 17, 2026 | In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs u... |
| CVE-2026-0518 | MEDIUM | 4.8 | 0.1% | Jan 17, 2026 | CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with adm... |
| CVE-2026-0517 | HIGH | 7.5 | 0.3% | Jan 17, 2026 | CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can ... |
| CVE-2026-22865 | HIGH | 7.4 | 0.1% | Jan 16, 2026 | Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving d... |
| CVE-2026-22816 | HIGH | 7.4 | 0.1% | Jan 16, 2026 | Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving d... |
| CVE-2026-23745 | MEDIUM | 6.1 | 0.3% | Jan 16, 2026 | node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and Sym... |
| CVE-2026-21223 | HIGH | 7.1 | 0.3% | Jan 16, 2026 | Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feat... |
| CVE-2026-20960 | HIGH | 8 | 0.5% | Jan 16, 2026 | Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network. |
| CVE-2026-23800 | CRITICAL | 10 | 0.5% | Jan 16, 2026 | Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affe... |
| CVE-2026-23643 | MEDIUM | 5.4 | 0.3% | Jan 16, 2026 | CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl() method has a cross-site-scripting ... |
| CVE-2026-23744 | CRITICAL | 9.8 | 38.4% | Jan 16, 2026 | MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to r... |
| CVE-2026-23742 | HIGH | 8.8 | 0.5% | Jan 16, 2026 | Skipper is an HTTP router and reverse proxy for service composition. The default skipper configuration before 0.23.0 was... |
| CVE-2026-23735 | HIGH | 8.7 | 0.5% | Jan 16, 2026 | GraphQL Modules is a toolset of libraries and guidelines dedicated to create reusable, maintainable, testable and extend... |
| CVE-2026-23731 | MEDIUM | 4.3 | 0.3% | Jan 16, 2026 | WeGIA is a web manager for charitable institutions. Prior to 3.6.2, The web application is vulnerable to clickjacking at... |
| CVE-2026-23730 | MEDIUM | 6.1 | 0.2% | Jan 16, 2026 | WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the... |
| CVE-2026-23729 | MEDIUM | 6.1 | 0.2% | Jan 16, 2026 | WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the... |
| CVE-2026-23728 | MEDIUM | 6.1 | 0.2% | Jan 16, 2026 | WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now