2026 CVE Vulnerabilities
43,261 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-5266 | LOW | 2.3 | 0.2% | May 11, 2026 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo. This vulnerabil... |
| CVE-2026-44658 | LOW | 2.4 | 0.2% | May 11, 2026 | Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in... |
| CVE-2026-34094 | LOW | 3.8 | 0.2% | May 11, 2026 | Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Art... |
| CVE-2026-34086 | LOW | 2.1 | 0.2% | May 11, 2026 | Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1.43.7, 1.44.4, 1.45.2... |
| CVE-2026-8276 | LOW | 3.7 | 0.4% | May 11, 2026 | A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionality of the file module... |
| CVE-2026-8275 | LOW | 3.7 | 0.5% | May 11, 2026 | A vulnerability was detected in bettercap up to 2.41.5. Affected by this vulnerability is the function ippReadChunkedBod... |
| CVE-2026-8262 | LOW | 2.4 | 0.2% | May 11, 2026 | A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /acco... |
| CVE-2026-8256 | LOW | 2.4 | 0.2% | May 11, 2026 | A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown cod... |
| CVE-2026-8255 | LOW | 2.4 | 0.2% | May 11, 2026 | A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventor... |
| CVE-2026-8254 | LOW | 2.4 | 0.3% | May 11, 2026 | A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functi... |
| CVE-2026-8253 | LOW | 2.4 | 0.2% | May 11, 2026 | A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown funct... |
| CVE-2026-8242 | LOW | 3.7 | 0.3% | May 10, 2026 | A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted element is the function d... |
| CVE-2026-8221 | LOW | 2.4 | 0.2% | May 10, 2026 | A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/ite... |
| CVE-2026-8220 | LOW | 2.4 | 0.2% | May 10, 2026 | A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /invent... |
| CVE-2026-8219 | LOW | 2.4 | 0.3% | May 10, 2026 | A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown fun... |
| CVE-2026-8218 | LOW | 2.4 | 0.2% | May 10, 2026 | A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affected element is an unknown function of the... |
| CVE-2026-45182 | LOW | 2.2 | 0.1% | May 9, 2026 | GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN user as a consequence of a regist... |
| CVE-2026-8196 | LOW | 3.7 | 0.5% | May 9, 2026 | A flaw has been found in JeecgBoot 3.9.1. The impacted element is an unknown function of the file jeecg-module-system/je... |
| CVE-2026-44987 | LOW | 3.8 | 0.2% | May 8, 2026 | SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissi... |
| CVE-2026-44286 | LOW | 2.3 | 0.2% | May 8, 2026 | FastGPT is an AI Agent building platform. Prior to version 4.14.17, an unauthenticated Server-Side Request Forgery (SSRF... |
| CVE-2026-42195 | LOW | 3.4 | 0.2% | May 8, 2026 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.9, the draw.io client accepts... |
| CVE-2026-32803 | LOW | 3.3 | 0.1% | May 8, 2026 | Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 ... |
| CVE-2026-44916 | LOW | 3 | 0.3% | May 8, 2026 | In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered wit... |
| CVE-2026-8136 | LOW | 2.4 | 0.2% | May 8, 2026 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the fil... |
| CVE-2026-41498 | LOW | 3.3 | 0.2% | May 8, 2026 | Kimai is an open-source time tracking application. Prior to version 2.54.0, the Team API endpoints use #[IsGranted('edit... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now