2026 CVE Vulnerabilities
85,287 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-22231 | MEDIUM | 5.4 | 0.2% | Jan 8, 2026 | OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functi... |
| CVE-2026-22230 | HIGH | 7.6 | 0.3% | Jan 8, 2026 | OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access fu... |
| CVE-2026-21896 | MEDIUM | 5.7 | 0.2% | Jan 8, 2026 | Kirby is an open-source content management system. From versions 5.0.0 to 5.2.1, Kirby is missing permission checks in t... |
| CVE-2026-22522 | MEDIUM | 6.5 | 0.3% | Jan 8, 2026 | Missing Authorization vulnerability in Munir Kamal Block Slider block-slider allows Exploiting Incorrectly Configured Ac... |
| CVE-2026-22521 | HIGH | 7.5 | 0.4% | Jan 8, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-22519 | MEDIUM | 6.5 | 0.2% | Jan 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddyDev MediaPres... |
| CVE-2026-22518 | MEDIUM | 6.5 | 0.2% | Jan 8, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons ... |
| CVE-2026-22517 | MEDIUM | 5.4 | 0.2% | Jan 8, 2026 | Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiti... |
| CVE-2026-22492 | MEDIUM | 4.3 | 0.3% | Jan 8, 2026 | Missing Authorization vulnerability in Nawawi Jamili Docket Cache docket-cache allows Exploiting Incorrectly Configured ... |
| CVE-2026-22490 | MEDIUM | 5.4 | 0.2% | Jan 8, 2026 | Missing Authorization vulnerability in niklaslindemann Bulk Landing Page Creator for WordPress LPagery lpagery allows Ex... |
| CVE-2026-22489 | MEDIUM | 4.3 | 0.2% | Jan 8, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Wptexture Image Slider Slideshow image-slider-slidesho... |
| CVE-2026-22488 | MEDIUM | 5.3 | 0.2% | Jan 8, 2026 | Missing Authorization vulnerability in IdeaBox Creations Dashboard Welcome for Beaver Builder dashboard-welcome-for-beav... |
| CVE-2026-22487 | MEDIUM | 4.3 | 0.2% | Jan 8, 2026 | Missing Authorization vulnerability in baqend Speed Kit baqend allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2026-22486 | MEDIUM | 5.3 | 0.3% | Jan 8, 2026 | Missing Authorization vulnerability in Re Gallery allows Exploiting Incorrectly Configured Access Control Security Level... |
| CVE-2026-21639 | HIGH | 8.8 | 0.3% | Jan 8, 2026 | A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol ... |
| CVE-2026-21638 | HIGH | 8.8 | 0.4% | Jan 8, 2026 | A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol ... |
| CVE-2026-0671 | MEDIUM | 6.1 | 0.2% | Jan 8, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F... |
| CVE-2026-22255 | HIGH | 8.8 | 0.4% | Jan 8, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio... |
| CVE-2026-22246 | MEDIUM | 4.3 | 0.2% | Jan 8, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed ... |
| CVE-2026-22245 | HIGH | 7.5 | 0.2% | Jan 8, 2026 | Mastodon is a free, open-source social network server based on ActivityPub. By nature, Mastodon performs a lot of outbou... |
| CVE-2026-22244 | HIGH | 7.2 | 0.8% | Jan 8, 2026 | OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via S... |
| CVE-2026-22241 | HIGH | 7.2 | 3.1% | Jan 8, 2026 | The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, ... |
| CVE-2026-22043 | CRITICAL | 9.8 | 0.4% | Jan 8, 2026 | RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 through 1.0.0-alpha.78, a flawed... |
| CVE-2026-22042 | HIGH | 8.8 | 0.4% | Jan 8, 2026 | RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.79, he `ImportIam` admin API v... |
| CVE-2026-22041 | MEDIUM | 5.3 | 0.2% | Jan 8, 2026 | Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictiona... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now