2026 CVE Vulnerabilities
85,287 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-22773 | HIGH | 7.5 | 0.4% | Jan 10, 2026 | vLLM is an inference and serving engine for large language models (LLMs). In versions from 0.6.4 to before 0.12.0, users... |
| CVE-2026-22705 | MEDIUM | 6.4 | 0.2% | Jan 10, 2026 | RustCrypto: Signatures offers support for digital signatures, which provide authentication of data using public-key cryp... |
| CVE-2026-22704 | MEDIUM | 5.4 | 1.0% | Jan 10, 2026 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vul... |
| CVE-2026-22703 | MEDIUM | 5.5 | 0.1% | Jan 10, 2026 | Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bun... |
| CVE-2026-22702 | MEDIUM | 4.5 | 0.1% | Jan 10, 2026 | virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-... |
| CVE-2026-22701 | MEDIUM | 5.3 | 0.1% | Jan 10, 2026 | filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability ... |
| CVE-2026-22700 | HIGH | 7.5 | 0.3% | Jan 10, 2026 | RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for... |
| CVE-2026-22699 | HIGH | 7.5 | 0.4% | Jan 10, 2026 | RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for... |
| CVE-2026-22698 | HIGH | 7.5 | 0.2% | Jan 10, 2026 | RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including types and traits for... |
| CVE-2026-22693 | MEDIUM | 5.3 | 0.4% | Jan 10, 2026 | HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the Subta... |
| CVE-2026-22689 | MEDIUM | 6.5 | 0.2% | Jan 10, 2026 | Mailpit is an email testing tool and API for developers. Prior to version 1.28.2, the Mailpit WebSocket server is config... |
| CVE-2026-22685 | CRITICAL | 9.8 | 0.4% | Jan 10, 2026 | DevToys is a desktop app for developers. In versions from 2.0.0.0 to before 2.0.9.0, a path traversal vulnerability exis... |
| CVE-2026-22611 | LOW | 3.7 | 0.2% | Jan 10, 2026 | AWS SDK for .NET works with Amazon Web Services to help build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon... |
| CVE-2026-22691 | MEDIUM | 5.3 | 0.4% | Jan 10, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for ma... |
| CVE-2026-22690 | MEDIUM | 5.3 | 0.4% | Jan 10, 2026 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for mi... |
| CVE-2026-22688 | HIGH | 8.8 | 1.7% | Jan 10, 2026 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.... |
| CVE-2026-22687 | CRITICAL | 9.8 | 0.4% | Jan 10, 2026 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.... |
| CVE-2026-22610 | MEDIUM | 6.1 | 0.4% | Jan 10, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-22589 | HIGH | 7.5 | 0.4% | Jan 10, 2026 | Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 4.10.2, 5.0.7, 5.1.9, and 5.2.5,... |
| CVE-2026-22597 | LOW | 2.7 | 0.3% | Jan 10, 2026 | Ghost is a Node.js content management system. In versions 5.38.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerabili... |
| CVE-2026-22596 | HIGH | 7.2 | 0.4% | Jan 10, 2026 | Ghost is a Node.js content management system. In versions 5.90.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerabili... |
| CVE-2026-22595 | HIGH | 8.1 | 0.5% | Jan 10, 2026 | Ghost is a Node.js content management system. In versions 5.121.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerabil... |
| CVE-2026-22594 | HIGH | 8.1 | 0.4% | Jan 10, 2026 | Ghost is a Node.js content management system. In versions 5.105.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerabil... |
| CVE-2026-22030 | MEDIUM | 6.5 | 0.1% | Jan 10, 2026 | React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through... |
| CVE-2026-22029 | MEDIUM | 6.1 | 0.9% | Jan 10, 2026 | React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now