2026 CVE Vulnerabilities
85,287 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-22252 | CRITICAL | 9.9 | 3.7% | Jan 12, 2026 | LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbi... |
| CVE-2026-22200 | HIGH | 7.5 | 73.1% | Jan 12, 2026 | Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerabi... |
| CVE-2026-22251 | MEDIUM | 5.5 | 0.1% | Jan 12, 2026 | wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, wlc supported providing unscoped API key... |
| CVE-2026-22250 | MEDIUM | 5.5 | 0.1% | Jan 12, 2026 | wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped fo... |
| CVE-2026-22050 | MEDIUM | 4.3 | 0.2% | Jan 12, 2026 | ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a ... |
| CVE-2026-22033 | MEDIUM | 5.4 | 0.2% | Jan 12, 2026 | Label Studio is a multi-type data labeling and annotation tool. In 1.22.0 and earlier, a persistent stored cross-site sc... |
| CVE-2026-0855 | HIGH | 8.8 | 1.1% | Jan 12, 2026 | Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remot... |
| CVE-2026-0854 | HIGH | 8.8 | 1.0% | Jan 12, 2026 | Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote ... |
| CVE-2026-0853 | MEDIUM | 6.9 | 0.3% | Jan 12, 2026 | Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthen... |
| CVE-2026-0852 | CRITICAL | 9.8 | 0.3% | Jan 12, 2026 | A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function ... |
| CVE-2026-0851 | CRITICAL | 9.8 | 0.3% | Jan 12, 2026 | A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of th... |
| CVE-2026-0850 | HIGH | 7.2 | 0.3% | Jan 11, 2026 | A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted is an unknown function... |
| CVE-2026-0843 | MEDIUM | 6.3 | 0.2% | Jan 11, 2026 | A vulnerability has been found in jiujiujia/victor123/wxw850227 jjjfood and jjjshop_food up to 20260103. This vulnerabil... |
| CVE-2026-0842 | MEDIUM | 6.3 | 0.4% | Jan 11, 2026 | A flaw has been found in Flycatcher Toys smART Sketcher up to 2.0. This affects an unknown part of the component Bluetoo... |
| CVE-2026-0841 | HIGH | 8.8 | 3.4% | Jan 11, 2026 | A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function strcpy of the file /gof... |
| CVE-2026-0840 | HIGH | 8.8 | 3.7% | Jan 11, 2026 | A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this vulnerability is the function s... |
| CVE-2026-0839 | HIGH | 8.8 | 1.0% | Jan 11, 2026 | A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the file /goform/APSecuri... |
| CVE-2026-0838 | HIGH | 8.8 | 3.4% | Jan 11, 2026 | A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy of the file /goform/Co... |
| CVE-2026-0837 | HIGH | 8.8 | 3.4% | Jan 11, 2026 | A vulnerability was identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formFir... |
| CVE-2026-0836 | HIGH | 8.8 | 0.8% | Jan 11, 2026 | A vulnerability was determined in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /gof... |
| CVE-2026-0824 | LOW | 3.5 | 0.2% | Jan 10, 2026 | A security flaw has been discovered in questdb ui up to 1.11.9. Impacted is an unknown function of the component Web Con... |
| CVE-2026-0822 | HIGH | 8.8 | 0.4% | Jan 10, 2026 | A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function js_typed_array_sort o... |
| CVE-2026-0821 | CRITICAL | 9.8 | 0.4% | Jan 10, 2026 | A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function js_typed_arra... |
| CVE-2026-0831 | MEDIUM | 5.3 | 0.2% | Jan 10, 2026 | The Templately plugin for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 3.4.8. T... |
| CVE-2026-22777 | HIGH | 7.5 | 0.3% | Jan 10, 2026 | ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an att... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now