2026 CVE Vulnerabilities
48,516 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-39443 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions. |
| CVE-2026-34895 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions. |
| CVE-2026-34894 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions. |
| CVE-2026-34893 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions. |
| CVE-2026-34888 | HIGH | 7.5 | 0.3% | Jun 17, 2026 | Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions. |
| CVE-2026-28615 | HIGH | 7.8 | 0.1% | Jun 17, 2026 | In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. This could lead... |
| CVE-2026-27400 | HIGH | 8.6 | 0.5% | Jun 17, 2026 | Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions. |
| CVE-2026-25439 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Broken Authentication in Booknetic <= 4.8.5 versions. |
| CVE-2026-22343 | HIGH | 8.6 | 0.3% | Jun 17, 2026 | Unauthenticated Broken Access Control in WordPress Dating Theme <= 11.2.0 versions. |
| CVE-2026-22342 | HIGH | 8.8 | 0.2% | Jun 17, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in WordPress Dating Theme <= 11.2.0 versions. |
| CVE-2026-22339 | HIGH | 7.1 | 0.2% | Jun 17, 2026 | Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions. |
| CVE-2026-22338 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions. |
| CVE-2026-22335 | HIGH | 8.5 | 0.3% | Jun 17, 2026 | Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions. |
| CVE-2026-22334 | HIGH | 7.5 | 0.5% | Jun 17, 2026 | Subscriber Arbitrary File Download in Woocommerce Book Price <= 1.3 versions. |
| CVE-2026-22331 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions. |
| CVE-2026-22330 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Right Way <= 4.0 versions. |
| CVE-2026-22329 | HIGH | 7.1 | 0.2% | Jun 17, 2026 | Unauthenticated Cross Site Scripting (XSS) in Skillate <= 1.2.10 versions. |
| CVE-2026-22328 | HIGH | 7.1 | 0.2% | Jun 17, 2026 | Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions. |
| CVE-2026-22326 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions. |
| CVE-2026-22325 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions. |
| CVE-2026-12468 | HIGH | 8.3 | 0.1% | Jun 17, 2026 | Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the render... |
| CVE-2026-12467 | HIGH | 8.3 | 0.2% | Jun 17, 2026 | Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the ... |
| CVE-2026-12466 | HIGH | 8.8 | 0.4% | Jun 17, 2026 | Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to execute ... |
| CVE-2026-12465 | HIGH | 8.3 | 0.2% | Jun 17, 2026 | Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised... |
| CVE-2026-12464 | HIGH | 8.3 | 0.2% | Jun 17, 2026 | Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the ren... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now