2026 CVE Vulnerabilities

85,287 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-21691MEDIUM6.5iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21690MEDIUM6.3iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21689MEDIUM6.5iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21688HIGH8.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21687HIGH7.1iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21686HIGH7.1iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21685HIGH7.1iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21684HIGH7.1iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21683HIGH8.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21441HIGH7.5urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HT...
CVE-2026-22190HIGH7.5The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerabil...
CVE-2026-22189CRITICAL9.8The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains a stack-based buffer overflow vulnerabil...
CVE-2026-22188MEDIUM5.5The deploy-stub component in Panda3D versions up to and including 1.10.16 contains a denial of service vulnerability due...
CVE-2026-22187HIGH7.8Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization ca...
CVE-2026-22186HIGH7.1Bio-Formats versions up to and including 8.3.0 contain an XML External Entity (XXE) vulnerability in the Leica Microsyst...
CVE-2026-22185MEDIUM4.6OpenLDAP Lightning Memory-Mapped Database (LMDB) versions 0.9.14 before 0.9.34, prior to commit 8e1fda8, contain a heap ...
CVE-2026-22184HIGH7.8zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/un...
CVE-2026-21682HIGH8.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21681HIGH7.1iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...
CVE-2026-21856HIGH8.8The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to commit 9bdb3a75a98a7047b6d70144eb1da1655d6992...
CVE-2026-21855MEDIUM6.1The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, a reflected Cross Site Scrip...
CVE-2026-21854CRITICAL9.8The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to 02 January 2025, an authentication bypass vul...
CVE-2026-0670MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F...
CVE-2026-22539MEDIUM5.3As the service interaction is performed without authentication, an attacker with some knowledge of the protocol could ob...
CVE-2026-21680HIGH7.5iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of Internatio...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now