2026 CVE Vulnerabilities
48,182 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-9786 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote ... |
| CVE-2026-9785 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remot... |
| CVE-2026-9784 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remot... |
| CVE-2026-9783 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability. This vulnerability allows re... |
| CVE-2026-9782 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remot... |
| CVE-2026-9781 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote ... |
| CVE-2026-9780 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows rem... |
| CVE-2026-8663 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execut... |
| CVE-2026-8659 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to exe... |
| CVE-2026-7570 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote ... |
| CVE-2026-7569 | HIGH | 8.8 | 0.7% | Jun 25, 2026 | Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows rem... |
| CVE-2026-39951 | HIGH | 8.8 | 0.2% | Jun 25, 2026 | Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injectio... |
| CVE-2026-9779 | HIGH | 7.2 | 0.4% | Jun 24, 2026 | ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability.... |
| CVE-2026-9778 | HIGH | 7.2 | 1.5% | Jun 24, 2026 | ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote a... |
| CVE-2026-9777 | HIGH | 7.2 | 1.5% | Jun 24, 2026 | ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacker... |
| CVE-2026-9776 | HIGH | 7.5 | 1.6% | Jun 24, 2026 | ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. This vulnerability ... |
| CVE-2026-9773 | HIGH | 8.8 | 1.1% | Jun 24, 2026 | Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote at... |
| CVE-2026-9772 | HIGH | 8.8 | 1.1% | Jun 24, 2026 | Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote att... |
| CVE-2026-55762 | HIGH | 8.1 | 0.3% | Jun 24, 2026 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, ... |
| CVE-2026-55759 | HIGH | 7.4 | 0.2% | Jun 24, 2026 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, ... |
| CVE-2026-54759 | HIGH | 8.7 | 0.3% | Jun 24, 2026 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, Lute's HTML sanitizer does not remove <if... |
| CVE-2026-54070 | HIGH | 7.1 | 0.2% | Jun 24, 2026 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, renderPackageREADME in kernel/bazaar/read... |
| CVE-2026-54066 | HIGH | 7.5 | 1.9% | Jun 24, 2026 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 ("Path Trave... |
| CVE-2026-52794 | HIGH | 7.5 | 0.3% | Jun 24, 2026 | Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a Regular Expression Denial of Se... |
| CVE-2026-50189 | HIGH | 7.2 | 0.2% | Jun 24, 2026 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled superviso... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now