2026 CVE Vulnerabilities
85,287 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-22034 | CRITICAL | 9.8 | 0.7% | Jan 8, 2026 | Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual... |
| CVE-2026-22032 | MEDIUM | 6.1 | 0.2% | Jan 8, 2026 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.14.0, an open redir... |
| CVE-2026-22028 | MEDIUM | 6.1 | 0.2% | Jan 8, 2026 | Preact, a lightweight web development framework, JSON serialization protection to prevent Virtual DOM elements from bein... |
| CVE-2026-21895 | MEDIUM | 5.3 | 0.4% | Jan 8, 2026 | The `rsa` crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from ... |
| CVE-2026-21892 | HIGH | 7.3 | 0.3% | Jan 8, 2026 | Parsl is a Python parallel scripting library. A SQL Injection vulnerability exists in the parsl-visualize component of v... |
| CVE-2026-21891 | CRITICAL | 9.8 | 2.2% | Jan 8, 2026 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In versions up to and inc... |
| CVE-2026-21885 | MEDIUM | 6.5 | 0.3% | Jan 8, 2026 | Miniflux 2 is an open source feed reader. Prior to version 2.2.16, Miniflux's media proxy endpoint (`GET /proxy/{encoded... |
| CVE-2026-21876 | MEDIUM | 5.3 | 13.1% | Jan 8, 2026 | The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewal... |
| CVE-2026-0719 | HIGH | 8.6 | 0.6% | Jan 8, 2026 | A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applicati... |
| CVE-2026-22242 | MEDIUM | 4.9 | 0.4% | Jan 8, 2026 | CoreShop is a Pimcore enhanced eCommerce solution. Prior to version 4.1.8, a blind SQL injection vulnerability exists in... |
| CVE-2026-21894 | MEDIUM | 6.5 | 0.4% | Jan 8, 2026 | n8n is an open source workflow automation platform. In versions from 0.150.0 to before 2.2.2, an authentication bypass v... |
| CVE-2026-21874 | MEDIUM | 5.3 | 0.5% | Jan 8, 2026 | NiceGUI is a Python-based UI framework. From versions v2.10.0 to 3.4.1, an unauthenticated attacker can exhaust Redis co... |
| CVE-2026-21873 | MEDIUM | 6.1 | 0.2% | Jan 8, 2026 | NiceGUI is a Python-based UI framework. From versions 2.22.0 to 3.4.1, an unsafe implementation in the pushstate event l... |
| CVE-2026-21872 | MEDIUM | 6.1 | 0.2% | Jan 8, 2026 | NiceGUI is a Python-based UI framework. From versions 2.22.0 to 3.4.1, an unsafe implementation in the click event liste... |
| CVE-2026-21871 | MEDIUM | 6.1 | 0.2% | Jan 8, 2026 | NiceGUI is a Python-based UI framework. From versions 2.13.0 to 3.4.1, there is a XSS risk in NiceGUI when developers pa... |
| CVE-2026-0676 | MEDIUM | 5.3 | 0.3% | Jan 8, 2026 | Missing Authorization vulnerability in G5Theme Zorka zorka allows Exploiting Incorrectly Configured Access Control Secur... |
| CVE-2026-0675 | — | — | — | Jan 8, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-0674 | MEDIUM | 4.3 | 0.2% | Jan 8, 2026 | Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Exploiting Incorrectly Con... |
| CVE-2026-0701 | HIGH | 7.2 | 0.4% | Jan 8, 2026 | A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability ... |
| CVE-2026-0700 | CRITICAL | 9.8 | 0.4% | Jan 8, 2026 | A vulnerability was determined in code-projects Intern Membership Management System 1.0. Affected is an unknown function... |
| CVE-2026-0699 | HIGH | 7.2 | 0.4% | Jan 8, 2026 | A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of ... |
| CVE-2026-0698 | HIGH | 7.2 | 0.4% | Jan 8, 2026 | A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown functio... |
| CVE-2026-0697 | HIGH | 7.2 | 0.4% | Jan 8, 2026 | A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element is an unknown funct... |
| CVE-2026-22581 | — | — | — | Jan 8, 2026 | Rejected reason: Not used |
| CVE-2026-22580 | — | — | — | Jan 8, 2026 | Rejected reason: Not used |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now