2026 CVE Vulnerabilities
85,287 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21884 | HIGH | 8.2 | 0.5% | Jan 10, 2026 | React Router is a router for React. In @remix-run/react version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, ... |
| CVE-2026-22612 | HIGH | 7.8 | 0.3% | Jan 10, 2026 | Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detectio... |
| CVE-2026-22609 | HIGH | 7.8 | 0.6% | Jan 10, 2026 | Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, the unsafe_imports() method in Fic... |
| CVE-2026-22608 | HIGH | 7.8 | 0.3% | Jan 10, 2026 | Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, both ctypes and pydoc modules aren... |
| CVE-2026-22607 | HIGH | 7.8 | 0.4% | Jan 10, 2026 | Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat P... |
| CVE-2026-22606 | HIGH | 7.8 | 0.4% | Jan 10, 2026 | Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat P... |
| CVE-2026-22605 | MEDIUM | 4.3 | 0.2% | Jan 10, 2026 | OpenProject is an open-source, web-based project management software. OpenProject versions prior to version 16.6.3, allo... |
| CVE-2026-22604 | MEDIUM | 5.3 | 0.3% | Jan 10, 2026 | OpenProject is an open-source, web-based project management software. For OpenProject versions from 11.2.1 to before 16.... |
| CVE-2026-22603 | MEDIUM | 6.5 | 0.2% | Jan 10, 2026 | OpenProject is an open-source, web-based project management software. Prior to version 16.6.2, OpenProject’s unauthentic... |
| CVE-2026-22602 | LOW | 3.5 | 0.3% | Jan 10, 2026 | OpenProject is an open-source, web-based project management software. Prior to version 16.6.2, a low‑privileged logged-i... |
| CVE-2026-22601 | HIGH | 7.2 | 0.3% | Jan 10, 2026 | OpenProject is an open-source, web-based project management software. For OpenProject version 16.6.1 and below, a regist... |
| CVE-2026-22600 | CRITICAL | 9.1 | 0.3% | Jan 10, 2026 | OpenProject is an open-source, web-based project management software. A Local File Read (LFR) vulnerability exists in th... |
| CVE-2026-22697 | HIGH | 7.5 | 0.5% | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2026-22027 | MEDIUM | 6 | 0.2% | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2026-22026 | HIGH | 7.5 | 0.5% | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2026-22025 | LOW | 3.7 | 0.5% | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2026-22024 | MEDIUM | 5.3 | 0.4% | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2026-22023 | HIGH | 7.5 | 0.5% | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2026-21900 | MEDIUM | 5.9 | 0.5% | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2026-21899 | MEDIUM | 4.9 | 0.3% | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2026-21898 | HIGH | 8.2 | 0.4% | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2026-21897 | HIGH | 7.3 | 0.3% | Jan 10, 2026 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2026-22584 | CRITICAL | 9.8 | 0.4% | Jan 9, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux al... |
| CVE-2026-0830 | HIGH | 8.4 | 1.3% | Jan 9, 2026 | Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge... |
| CVE-2026-22198 | MEDIUM | 6.1 | 0.3% | Jan 9, 2026 | GestSup versions prior to 3.2.60 contain a pre-authentication stored cross-site scripting (XSS) vulnerability in the API... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now