2026 CVE Vulnerabilities
85,287 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-22197 | HIGH | 8.1 | 0.3% | Jan 9, 2026 | GestSup versions prior to 3.2.60 contain multiple SQL injection vulnerabilities in the asset list functionality. Multipl... |
| CVE-2026-22196 | HIGH | 8.1 | 0.3% | Jan 9, 2026 | GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled... |
| CVE-2026-22195 | HIGH | 8.1 | 0.3% | Jan 9, 2026 | GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in the search bar functionality. User-controlled ... |
| CVE-2026-22194 | HIGH | 8.8 | 0.2% | Jan 9, 2026 | GestSup versions up to and including 3.2.60 contain a cross-site request forgery (CSRF) vulnerability where the applicat... |
| CVE-2026-0817 | MEDIUM | 5.3 | 0.3% | Jan 9, 2026 | Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.... |
| CVE-2026-0803 | HIGH | 8.8 | 0.4% | Jan 9, 2026 | A vulnerability was found in PHPGurukul Online Course Registration System up to 3.1. This affects an unknown part of the... |
| CVE-2026-22082 | HIGH | 8.8 | 0.5% | Jan 9, 2026 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the u... |
| CVE-2026-22081 | HIGH | 8.8 | 0.4% | Jan 9, 2026 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the m... |
| CVE-2026-22080 | HIGH | 8.7 | 0.1% | Jan 9, 2026 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the t... |
| CVE-2026-22079 | HIGH | 8.7 | 0.1% | Jan 9, 2026 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup Router) due to the p... |
| CVE-2026-0627 | MEDIUM | 6.4 | 0.2% | Jan 9, 2026 | The AMP for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up... |
| CVE-2026-21409 | HIGH | 8.2 | 0.3% | Jan 9, 2026 | Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-middle attack is condu... |
| CVE-2026-20976 | HIGH | 7.8 | 0.1% | Jan 9, 2026 | Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script. |
| CVE-2026-20975 | MEDIUM | 5.5 | 0.1% | Jan 9, 2026 | Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access s... |
| CVE-2026-20974 | MEDIUM | 4.6 | 0.2% | Jan 9, 2026 | Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attack... |
| CVE-2026-20973 | CRITICAL | 9.1 | 0.4% | Jan 9, 2026 | Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bou... |
| CVE-2026-20972 | LOW | 3.3 | 0.1% | Jan 9, 2026 | Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to e... |
| CVE-2026-20971 | HIGH | 7.8 | 0.1% | Jan 9, 2026 | Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary c... |
| CVE-2026-20970 | HIGH | 7.8 | 0.1% | Jan 9, 2026 | Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged AP... |
| CVE-2026-20969 | MEDIUM | 5.5 | 0.2% | Jan 9, 2026 | Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with syste... |
| CVE-2026-20968 | MEDIUM | 6.7 | 0.2% | Jan 9, 2026 | Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code. |
| CVE-2026-0563 | MEDIUM | 6.4 | 0.2% | Jan 9, 2026 | The WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin for WordPress is vulnerable to Store... |
| CVE-2026-22636 | — | — | — | Jan 9, 2026 | Rejected reason: Not used |
| CVE-2026-22635 | — | — | — | Jan 9, 2026 | Rejected reason: Not used |
| CVE-2026-22634 | — | — | — | Jan 9, 2026 | Rejected reason: Not used |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now