2026 CVE Vulnerabilities
85,287 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-0407 | HIGH | 8 | 0.2% | Jan 13, 2026 | An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with Wi... |
| CVE-2026-0406 | HIGH | 8 | 0.2% | Jan 13, 2026 | An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN t... |
| CVE-2026-0405 | HIGH | 7.8 | 0.3% | Jan 13, 2026 | An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access th... |
| CVE-2026-0404 | HIGH | 8 | 1.1% | Jan 13, 2026 | An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent at... |
| CVE-2026-0403 | HIGH | 8 | 0.3% | Jan 13, 2026 | An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN t... |
| CVE-2026-22755 | CRITICAL | 9.3 | 21.2% | Jan 13, 2026 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected de... |
| CVE-2026-0892 | CRITICAL | 9.8 | 0.4% | Jan 13, 2026 | Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption a... |
| CVE-2026-0891 | HIGH | 8.1 | 0.4% | Jan 13, 2026 | Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these b... |
| CVE-2026-0890 | MEDIUM | 5.4 | 0.3% | Jan 13, 2026 | Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ... |
| CVE-2026-0889 | HIGH | 7.5 | 0.5% | Jan 13, 2026 | Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147... |
| CVE-2026-0888 | MEDIUM | 5.3 | 0.3% | Jan 13, 2026 | Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147. |
| CVE-2026-0887 | MEDIUM | 4.3 | 0.3% | Jan 13, 2026 | Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Fir... |
| CVE-2026-0886 | MEDIUM | 5.3 | 0.4% | Jan 13, 2026 | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32... |
| CVE-2026-0885 | MEDIUM | 6.5 | 0.4% | Jan 13, 2026 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderb... |
| CVE-2026-0884 | CRITICAL | 9.8 | 0.4% | Jan 13, 2026 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thund... |
| CVE-2026-0883 | MEDIUM | 5.3 | 0.4% | Jan 13, 2026 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thun... |
| CVE-2026-0882 | HIGH | 8.8 | 0.4% | Jan 13, 2026 | Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7,... |
| CVE-2026-0881 | CRITICAL | 10 | 0.3% | Jan 13, 2026 | Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147. |
| CVE-2026-0880 | HIGH | 8.8 | 0.6% | Jan 13, 2026 | Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox E... |
| CVE-2026-0879 | CRITICAL | 9.8 | 0.5% | Jan 13, 2026 | Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 1... |
| CVE-2026-0878 | HIGH | 8 | 0.4% | Jan 13, 2026 | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed... |
| CVE-2026-0877 | HIGH | 8.1 | 0.4% | Jan 13, 2026 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firef... |
| CVE-2026-0684 | MEDIUM | 4.3 | 0.3% | Jan 13, 2026 | The CP Image Store with Slideshow plugin for WordPress is vulnerable to authorization bypass in all versions up to, and ... |
| CVE-2026-0859 | HIGH | 7.8 | 0.2% | Jan 13, 2026 | TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious... |
| CVE-2026-22837 | — | — | — | Jan 13, 2026 | Rejected reason: Not used |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now