2026 CVE Vulnerabilities
48,546 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-12016 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had comp... |
| CVE-2026-12014 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to pote... |
| CVE-2026-12012 | HIGH | 8.1 | 0.2% | Jun 11, 2026 | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position ... |
| CVE-2026-12011 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromi... |
| CVE-2026-12010 | HIGH | 8.3 | 0.3% | Jun 11, 2026 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compro... |
| CVE-2026-12009 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a re... |
| CVE-2026-12008 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromi... |
| CVE-2026-12007 | HIGH | 8.8 | 0.3% | Jun 11, 2026 | Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrar... |
| CVE-2026-53819 | HIGH | 7.8 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env... |
| CVE-2026-53817 | HIGH | 8.8 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with ... |
| CVE-2026-53816 | HIGH | 8.6 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allow... |
| CVE-2026-53815 | HIGH | 7.1 | 0.2% | Jun 11, 2026 | OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allo... |
| CVE-2026-53814 | HIGH | 8.7 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly rece... |
| CVE-2026-53813 | HIGH | 7.8 | 0.1% | Jun 11, 2026 | OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state ... |
| CVE-2026-53812 | HIGH | 7.7 | 0.2% | Jun 11, 2026 | OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authentica... |
| CVE-2026-53811 | HIGH | 8.8 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authe... |
| CVE-2026-53810 | HIGH | 8.8 | 0.4% | Jun 11, 2026 | OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redir... |
| CVE-2026-53807 | HIGH | 8.8 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows au... |
| CVE-2026-53806 | HIGH | 8.8 | 0.4% | Jun 11, 2026 | OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass... |
| CVE-2026-50245 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is r... |
| CVE-2026-50005 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera... |
| CVE-2026-53782 | HIGH | 7.4 | 0.3% | Jun 11, 2026 | Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast... |
| CVE-2026-46622 | HIGH | 8.1 | 0.2% | Jun 11, 2026 | SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, API tokens used to authenticate all REST API... |
| CVE-2026-46489 | HIGH | 8.1 | 0.3% | Jun 11, 2026 | SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo upload feature accepts any ... |
| CVE-2026-45175 | HIGH | 7.8 | 0.1% | Jun 11, 2026 | Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent vali... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now