2026 CVE Vulnerabilities
85,287 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-22579 | — | — | — | Jan 8, 2026 | Rejected reason: Not used |
| CVE-2026-22578 | — | — | — | Jan 8, 2026 | Rejected reason: Not used |
| CVE-2026-22577 | — | — | — | Jan 8, 2026 | Rejected reason: Not used |
| CVE-2026-21427 | HIGH | 8.5 | 0.2% | Jan 8, 2026 | The installers for multiple products provided by PIONEER CORPORATION contain an issue with the DLL search path, which ma... |
| CVE-2026-0707 | MEDIUM | 5.3 | 0.4% | Jan 8, 2026 | A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of ... |
| CVE-2026-21883 | MEDIUM | 5.4 | 0.2% | Jan 8, 2026 | Bokeh is an interactive visualization library written in Python. In versions 3.8.1 and below, if a server is configured ... |
| CVE-2026-21881 | CRITICAL | 9.1 | 0.4% | Jan 8, 2026 | Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below is vulnerable to a crit... |
| CVE-2026-21880 | MEDIUM | 5.3 | 0.4% | Jan 8, 2026 | Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below have an LDAP Injection ... |
| CVE-2026-21879 | MEDIUM | 6.1 | 0.3% | Jan 8, 2026 | Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below are vulnerable to an Op... |
| CVE-2026-22035 | HIGH | 7.3 | 0.9% | Jan 8, 2026 | Greenshot is an open source Windows screenshot utility. Versions 1.3.310 and below arvulnerable to OS Command Injection ... |
| CVE-2026-21877 | CRITICAL | 9.9 | 5.3% | Jan 8, 2026 | n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated attacker may be able... |
| CVE-2026-21868 | HIGH | 7.5 | 0.3% | Jan 8, 2026 | Flag Forge is a Capture The Flag (CTF) platform. Versions 2.3.2 and below have a Regular Expression Denial of Service (R... |
| CVE-2026-21875 | CRITICAL | 9.8 | 0.3% | Jan 8, 2026 | ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#187 and below allow an attacker to perform Blind... |
| CVE-2026-21869 | CRITICAL | 9.8 | 0.4% | Jan 8, 2026 | llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the n_discard parameter is par... |
| CVE-2026-21859 | MEDIUM | 5.3 | 0.8% | Jan 8, 2026 | Mailpit is an email testing tool and API for developers. Versions 1.28.0 and below have a Server-Side Request Forgery (S... |
| CVE-2026-21858 | CRITICAL | 10 | 71.6% | Jan 8, 2026 | n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker t... |
| CVE-2026-21695 | MEDIUM | 4.3 | 0.2% | Jan 8, 2026 | Titra is open source project time tracking software. In versions 0.99.49 and below, an API has a Mass Assignment vulnera... |
| CVE-2026-21694 | HIGH | 8.1 | 0.2% | Jan 8, 2026 | Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing u... |
| CVE-2026-21857 | MEDIUM | 6.5 | 0.5% | Jan 7, 2026 | REDAXO is a PHP-based content management system. Prior to version 5.20.2, authenticated users with backup permissions ca... |
| CVE-2026-21851 | MEDIUM | 5.3 | 0.3% | Jan 7, 2026 | MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a P... |
| CVE-2026-21697 | HIGH | 8.1 | 0.4% | Jan 7, 2026 | axios4go is a Go HTTP client library. Prior to version 0.6.4, a race condition vulnerability exists in the shared HTTP c... |
| CVE-2026-22047 | HIGH | 8.8 | 0.3% | Jan 7, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio... |
| CVE-2026-22046 | HIGH | 8.8 | 0.3% | Jan 7, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio... |
| CVE-2026-21693 | HIGH | 8.8 | 0.3% | Jan 7, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio... |
| CVE-2026-21692 | HIGH | 8.8 | 0.3% | Jan 7, 2026 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now