2026 CVE Vulnerabilities
85,283 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-22907 | CRITICAL | 9.1 | 0.4% | Jan 15, 2026 | An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system dat... |
| CVE-2026-22637 | — | — | — | Jan 15, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-0976 | LOW | 3.7 | 0.4% | Jan 15, 2026 | A flaw was found in Keycloak. This improper input validation vulnerability occurs because Keycloak accepts RFC-compliant... |
| CVE-2026-0713 | — | — | — | Jan 15, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-0712 | — | — | — | Jan 15, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-23582 | — | — | — | Jan 15, 2026 | Rejected reason: Not used |
| CVE-2026-23581 | — | — | — | Jan 15, 2026 | Rejected reason: Not used |
| CVE-2026-23580 | — | — | — | Jan 15, 2026 | Rejected reason: Not used |
| CVE-2026-23579 | — | — | — | Jan 15, 2026 | Rejected reason: Not used |
| CVE-2026-23578 | — | — | — | Jan 15, 2026 | Rejected reason: Not used |
| CVE-2026-23577 | — | — | — | Jan 15, 2026 | Rejected reason: Not used |
| CVE-2026-23576 | — | — | — | Jan 15, 2026 | Rejected reason: Not used |
| CVE-2026-23575 | — | — | — | Jan 15, 2026 | Rejected reason: Not used |
| CVE-2026-23574 | — | — | — | Jan 15, 2026 | Rejected reason: Not used |
| CVE-2026-0600 | MEDIUM | 6.2 | 0.3% | Jan 14, 2026 | Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenti... |
| CVE-2026-0421 | HIGH | 7 | 0.1% | Jan 14, 2026 | A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads wh... |
| CVE-2026-0601 | MEDIUM | 5.1 | 0.4% | Jan 14, 2026 | A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to exe... |
| CVE-2026-23512 | HIGH | 7.8 | 0.2% | Jan 14, 2026 | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability wh... |
| CVE-2026-0962 | MEDIUM | 6.5 | 0.2% | Jan 14, 2026 | SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service |
| CVE-2026-0961 | MEDIUM | 6.5 | 0.2% | Jan 14, 2026 | BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service |
| CVE-2026-0960 | MEDIUM | 5.5 | 0.1% | Jan 14, 2026 | HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service |
| CVE-2026-0959 | MEDIUM | 6.5 | 0.2% | Jan 14, 2026 | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service |
| CVE-2026-0861 | HIGH | 8.4 | 0.4% | Jan 14, 2026 | Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C... |
| CVE-2026-23498 | HIGH | 7.2 | 0.4% | Jan 14, 2026 | Shopware is an open commerce platform. From 6.7.0.0 to before 6.7.6.1, a regression of CVE-2023-2017 leads to an array a... |
| CVE-2026-23497 | MEDIUM | 5.4 | 0.1% | Jan 14, 2026 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In 2.44.0 and ear... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now