2026 CVE Vulnerabilities
85,283 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21302 | MEDIUM | 5.5 | 0.2% | Jan 13, 2026 | Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to... |
| CVE-2026-21301 | MEDIUM | 5.5 | 0.1% | Jan 13, 2026 | Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could le... |
| CVE-2026-21300 | MEDIUM | 5.5 | 0.1% | Jan 13, 2026 | Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could le... |
| CVE-2026-21299 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result... |
| CVE-2026-21298 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result... |
| CVE-2026-0543 | MEDIUM | 6.5 | 0.4% | Jan 13, 2026 | Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation (C... |
| CVE-2026-0531 | MEDIUM | 6.5 | 0.4% | Jan 13, 2026 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-1... |
| CVE-2026-0530 | MEDIUM | 6.5 | 0.3% | Jan 13, 2026 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-1... |
| CVE-2026-0528 | HIGH | 7.5 | 0.3% | Jan 13, 2026 | Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service thr... |
| CVE-2026-22818 | MEDIUM | 6.5 | 0.1% | Jan 13, 2026 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.11.4, there is a flaw i... |
| CVE-2026-22817 | MEDIUM | 6.5 | 0.1% | Jan 13, 2026 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.11.4, there is a flaw i... |
| CVE-2026-22814 | HIGH | 8.2 | 0.5% | Jan 13, 2026 | @adonisjs/lucid is an SQL ORM for AdonisJS built on top of Knex. Prior to 21.8.2 and 22.0.0-next.6, there is a Mass Assi... |
| CVE-2026-22809 | MEDIUM | 4.4 | 0.1% | Jan 13, 2026 | tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.29.0, a Regular Expression Denial of Service (R... |
| CVE-2026-21308 | MEDIUM | 5.5 | 0.2% | Jan 13, 2026 | Substance3D - Designer versions 15.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead t... |
| CVE-2026-21307 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | Substance3D - Designer versions 15.0.3 and earlier are affected by an out-of-bounds write vulnerability that could resul... |
| CVE-2026-21306 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | Substance3D - Sampler versions 5.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result ... |
| CVE-2026-21305 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | Substance3D - Painter versions 11.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result... |
| CVE-2026-21287 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbi... |
| CVE-2026-22791 | MEDIUM | 6.1 | 0.2% | Jan 13, 2026 | openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vul... |
| CVE-2026-21304 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could... |
| CVE-2026-21288 | MEDIUM | 5.5 | 0.2% | Jan 13, 2026 | Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead t... |
| CVE-2026-21283 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | Bridge versions 15.1.2, 16.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in... |
| CVE-2026-21281 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | InCopy versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in... |
| CVE-2026-21280 | HIGH | 8.6 | 0.2% | Jan 13, 2026 | Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result i... |
| CVE-2026-21278 | MEDIUM | 5.5 | 0.2% | Jan 13, 2026 | InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead t... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now