2026 CVE Vulnerabilities
85,283 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21903 | HIGH | 7.1 | 0.4% | Jan 15, 2026 | A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a ... |
| CVE-2026-1002 | MEDIUM | 5.3 | 0.3% | Jan 15, 2026 | The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handle... |
| CVE-2026-0203 | HIGH | 7.1 | 0.2% | Jan 15, 2026 | An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS allows an... |
| CVE-2026-23766 | — | — | — | Jan 15, 2026 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2026-23746 | CRITICAL | 9.3 | 0.9% | Jan 15, 2026 | Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to... |
| CVE-2026-23622 | HIGH | 8.8 | 0.2% | Jan 15, 2026 | Easy!Appointments is a self hosted appointment scheduler. In 1.5.2 and earlier, application/core/EA_Security.php::csrf_v... |
| CVE-2026-23527 | CRITICAL | 9.8 | 0.6% | Jan 15, 2026 | H3 is a minimal H(TTP) framework built for high performance and portability. Prior to 1.15.5, there is a critical HTTP R... |
| CVE-2026-23520 | HIGH | 8 | 1.6% | Jan 15, 2026 | Arcane provides modern docker management. Prior to 1.13.0, Arcane has a command injection in the updater service. Arcane... |
| CVE-2026-23519 | CRITICAL | 9.8 | 0.5% | Jan 15, 2026 | RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-... |
| CVE-2026-23511 | MEDIUM | 5.3 | 0.4% | Jan 15, 2026 | ZITADEL is an open source identity management platform. Prior to 4.9.1 and 3.4.6, a user enumeration vulnerability has b... |
| CVE-2026-22803 | HIGH | 7.5 | 0.5% | Jan 15, 2026 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From 2.49.0 to 2.49.4,... |
| CVE-2026-22775 | HIGH | 7.5 | 0.6% | Jan 15, 2026 | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the ... |
| CVE-2026-22774 | HIGH | 7.5 | 0.6% | Jan 15, 2026 | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the ... |
| CVE-2026-22249 | CRITICAL | 9.8 | 0.5% | Jan 15, 2026 | Docmost is an open-source collaborative wiki and documentation software. From 0.21.0 to before 0.24.0, Docmost is vulner... |
| CVE-2026-0227 | HIGH | 7.5 | 0.7% | Jan 15, 2026 | A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (... |
| CVE-2026-23496 | MEDIUM | 5.4 | 0.3% | Jan 15, 2026 | Pimcore Web2Print Tools Bundle adds tools for web-to-print use cases to Pimcore. Prior to 5.2.2 and 6.1.1, the applicati... |
| CVE-2026-23495 | MEDIUM | 4.3 | 0.3% | Jan 15, 2026 | Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Prior to 2.2.3 and 1.7.16, the API endpoint for listin... |
| CVE-2026-23494 | MEDIUM | 6.5 | 0.3% | Jan 15, 2026 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 12.3.1 and 11.5.14, the application fails to e... |
| CVE-2026-23493 | MEDIUM | 4.9 | 0.4% | Jan 15, 2026 | Pimcore is an Open Source Data & Experience Management Platform. Prior to 12.3.1 and 11.5.14, the http_error_log file st... |
| CVE-2026-22867 | MEDIUM | 5.4 | 0.3% | Jan 15, 2026 | LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 3.8.0 to 4.3.0, a Stored Cross-Site Sc... |
| CVE-2026-22265 | HIGH | 7.5 | 2.1% | Jan 15, 2026 | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to 8.2.8.2, command injecti... |
| CVE-2026-20076 | MEDIUM | 4.8 | 0.2% | Jan 15, 2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticat... |
| CVE-2026-20075 | MEDIUM | 4.8 | 0.2% | Jan 15, 2026 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Pri... |
| CVE-2026-20047 | MEDIUM | 4.8 | 0.2% | Jan 15, 2026 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Iden... |
| CVE-2026-0992 | LOW | 2.9 | 0.4% | Jan 15, 2026 | A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now