2026 CVE Vulnerabilities
85,283 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23727 | MEDIUM | 6.1 | 0.2% | Jan 16, 2026 | WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the... |
| CVE-2026-23726 | MEDIUM | 6.1 | 0.2% | Jan 16, 2026 | WeGIA is a web manager for charitable institutions. Prior to 3.6.2, An Open Redirect vulnerability was identified in the... |
| CVE-2026-23725 | MEDIUM | 5.4 | 0.2% | Jan 16, 2026 | WeGIA is a web manager for charitable institutions. Prior to 3.6.2, a Stored Cross-Site Scripting (XSS) vulnerability wa... |
| CVE-2026-23724 | MEDIUM | 5.4 | 0.2% | Jan 16, 2026 | WeGIA is a web manager for charitable institutions. Prior to 3.6.2, a Stored Cross-Site Scripting (XSS) vulnerability wa... |
| CVE-2026-23723 | HIGH | 7.2 | 0.4% | Jan 16, 2026 | WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an authenticated SQL Injection vulnerability was ide... |
| CVE-2026-23722 | MEDIUM | 6.1 | 0.2% | Jan 16, 2026 | WeGIA is a Web Manager for Charitable Institutions. Prior to 3.6.2, a Reflected Cross-Site Scripting (XSS) vulnerability... |
| CVE-2026-23645 | MEDIUM | 6.1 | 0.3% | Jan 16, 2026 | SiYuan is self-hosted, open source personal knowledge management software. Prior to 3.5.4-dev2, a Stored Cross-Site Scri... |
| CVE-2026-23634 | MEDIUM | 4.3 | 0.2% | Jan 16, 2026 | Pepr is a type safe K8s middleware. Prior to 1.0.5 , Pepr defaults to a cluster-admin RBAC configuration and does not ex... |
| CVE-2026-23535 | HIGH | 8 | 0.3% | Jan 16, 2026 | wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could wri... |
| CVE-2026-23490 | HIGH | 7.5 | 0.7% | Jan 16, 2026 | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to mem... |
| CVE-2026-0629 | HIGH | 8.7 | 0.4% | Jan 16, 2026 | Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models all... |
| CVE-2026-23529 | HIGH | 7.7 | 0.4% | Jan 16, 2026 | Kafka Connect BigQuery Connector is an implementation of a sink connector from Apache Kafka to Google BigQuery. Prior to... |
| CVE-2026-23528 | MEDIUM | 6.1 | 0.2% | Jan 16, 2026 | Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, an... |
| CVE-2026-23523 | HIGH | 8.8 | 6.3% | Jan 16, 2026 | Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0... |
| CVE-2026-22782 | HIGH | 7.5 | 0.5% | Jan 16, 2026 | RustFS is a distributed object storage system built in Rust. From >= 1.0.0-alpha.1 to 1.0.0-alpha.79, invalid RPC signat... |
| CVE-2026-0949 | MEDIUM | 4.8 | 0.2% | Jan 16, 2026 | PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with acc... |
| CVE-2026-21625 | HIGH | 8.8 | 0.3% | Jan 16, 2026 | User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by ... |
| CVE-2026-21624 | MEDIUM | 5.4 | 0.2% | Jan 16, 2026 | Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss com... |
| CVE-2026-21623 | MEDIUM | 5.4 | 0.2% | Jan 16, 2026 | Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component... |
| CVE-2026-0823 | — | — | — | Jan 16, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2026-0696 | MEDIUM | 6.5 | 0.4% | Jan 16, 2026 | In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute. In some... |
| CVE-2026-0695 | MEDIUM | 5.4 | 0.3% | Jan 16, 2026 | In ConnectWise PSA versions older than 2026.1, Time Entry notes stored in the Time Entry Audit Trail may be rendered wit... |
| CVE-2026-0616 | HIGH | 7.5 | 0.3% | Jan 16, 2026 | TheLibrarians web_fetch tool can be used to retrieve the Adminer interface content, which can then be used to log into t... |
| CVE-2026-0615 | HIGH | 7.3 | 0.2% | Jan 16, 2026 | The Librarian `supervisord` status page can be retrieved by the `web_fetch` tool, which can be used to retrieve running ... |
| CVE-2026-0613 | HIGH | 7.5 | 0.4% | Jan 16, 2026 | The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used w... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now