2026 CVE Vulnerabilities
85,283 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-0612 | HIGH | 7.5 | 0.3% | Jan 16, 2026 | The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve a... |
| CVE-2026-22876 | HIGH | 7.1 | 0.5% | Jan 16, 2026 | Path Traversal vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If this vu... |
| CVE-2026-20894 | MEDIUM | 4.8 | 0.2% | Jan 16, 2026 | Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If a... |
| CVE-2026-20759 | HIGH | 8.8 | 1.5% | Jan 16, 2026 | OS Command Injection vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation, whic... |
| CVE-2026-1004 | MEDIUM | 5.3 | 0.3% | Jan 16, 2026 | The Essential Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions ... |
| CVE-2026-0913 | MEDIUM | 6.4 | 0.2% | Jan 16, 2026 | The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored ... |
| CVE-2026-1003 | MEDIUM | 4.3 | 0.2% | Jan 16, 2026 | The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0. Thi... |
| CVE-2026-0942 | MEDIUM | 5.3 | 0.3% | Jan 16, 2026 | The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized mo... |
| CVE-2026-0939 | MEDIUM | 5.3 | 0.1% | Jan 16, 2026 | The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verifi... |
| CVE-2026-0916 | MEDIUM | 6.4 | 0.2% | Jan 16, 2026 | The Related Posts by Taxonomy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'relate... |
| CVE-2026-23769 | MEDIUM | 6.1 | 0.2% | Jan 16, 2026 | lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization ca... |
| CVE-2026-23768 | MEDIUM | 6.1 | 0.2% | Jan 16, 2026 | lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the ... |
| CVE-2026-0975 | CRITICAL | 9.8 | 1.4% | Jan 16, 2026 | Delta Electronics DIAView has Command Injection vulnerability. |
| CVE-2026-1000 | MEDIUM | 6.5 | 0.3% | Jan 16, 2026 | The MailerLite - WooCommerce integration plugin for WordPress is vulnerable to unauthorized data modification and deleti... |
| CVE-2026-0858 | MEDIUM | 6.1 | 0.3% | Jan 16, 2026 | Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored XSS due to insufficie... |
| CVE-2026-23714 | — | — | — | Jan 16, 2026 | Rejected reason: Not used |
| CVE-2026-23713 | — | — | — | Jan 16, 2026 | Rejected reason: Not used |
| CVE-2026-23712 | — | — | — | Jan 16, 2026 | Rejected reason: Not used |
| CVE-2026-23711 | — | — | — | Jan 16, 2026 | Rejected reason: Not used |
| CVE-2026-23710 | — | — | — | Jan 16, 2026 | Rejected reason: Not used |
| CVE-2026-23709 | — | — | — | Jan 16, 2026 | Rejected reason: Not used |
| CVE-2026-1023 | HIGH | 8.7 | 0.5% | Jan 16, 2026 | Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remot... |
| CVE-2026-1022 | HIGH | 8.7 | 0.6% | Jan 16, 2026 | Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing unauthenticated remote ... |
| CVE-2026-1021 | — | — | — | Jan 16, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-1020 | — | — | — | Jan 16, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now