2026 CVE Vulnerabilities
85,287 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21650 | — | — | — | Jan 3, 2026 | Rejected reason: Not used |
| CVE-2026-21649 | — | — | — | Jan 3, 2026 | Rejected reason: Not used |
| CVE-2026-21648 | — | — | — | Jan 3, 2026 | Rejected reason: Not used |
| CVE-2026-21647 | — | — | — | Jan 3, 2026 | Rejected reason: Not used |
| CVE-2026-21646 | — | — | — | Jan 3, 2026 | Rejected reason: Not used |
| CVE-2026-21645 | — | — | — | Jan 3, 2026 | Rejected reason: Not used |
| CVE-2026-21644 | — | — | — | Jan 3, 2026 | Rejected reason: Not used |
| CVE-2026-21484 | MEDIUM | 5.3 | 0.7% | Jan 3, 2026 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti... |
| CVE-2026-21483 | MEDIUM | 5.4 | 0.2% | Jan 2, 2026 | listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to version 6.0.0, lower-privileged use... |
| CVE-2026-21452 | HIGH | 7.5 | 0.5% | Jan 2, 2026 | MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior... |
| CVE-2026-21451 | HIGH | 8.4 | 0.5% | Jan 2, 2026 | Bagisto is an open source laravel eCommerce platform. A stored Cross-Site Scripting (XSS) vulnerability exists in Bagist... |
| CVE-2026-21450 | CRITICAL | 9.8 | 1.2% | Jan 2, 2026 | Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template in... |
| CVE-2026-21449 | HIGH | 8.8 | 0.5% | Jan 2, 2026 | Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template in... |
| CVE-2026-21448 | CRITICAL | 9.8 | 0.8% | Jan 2, 2026 | Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template in... |
| CVE-2026-21447 | HIGH | 7.1 | 0.3% | Jan 2, 2026 | Bagisto is an open source laravel eCommerce platform. Prior to version 2.3.10, an Insecure Direct Object Reference vulne... |
| CVE-2026-21446 | CRITICAL | 9.8 | 0.6% | Jan 2, 2026 | Bagisto is an open source laravel eCommerce platform. In versions on the 2.3 branch prior to 2.3.10, API routes remain a... |
| CVE-2026-21445 | CRITICAL | 9.1 | 20.7% | Jan 2, 2026 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple cr... |
| CVE-2026-0571 | MEDIUM | 6.5 | 0.4% | Jan 2, 2026 | A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this... |
| CVE-2026-21444 | MEDIUM | 5.5 | 0.1% | Jan 2, 2026 | libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10... |
| CVE-2026-21440 | CRITICAL | 9.2 | 1.1% | Jan 2, 2026 | AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may all... |
| CVE-2026-21433 | HIGH | 7.7 | 0.3% | Jan 2, 2026 | Emlog is an open source website building system. Versions up to and including 2.5.19 are vulnerable to server-side Out-o... |
| CVE-2026-21432 | MEDIUM | 5.4 | 0.2% | Jan 2, 2026 | Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can... |
| CVE-2026-21431 | MEDIUM | 5.4 | 0.2% | Jan 2, 2026 | Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `... |
| CVE-2026-21430 | CRITICAL | 9.3 | 0.2% | Jan 2, 2026 | Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cros... |
| CVE-2026-0570 | CRITICAL | 9.8 | 0.4% | Jan 2, 2026 | A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now