2026 CVE Vulnerabilities
48,704 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-46308 | HIGH | 7.8 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix use-after-free in scpsys_ge... |
| CVE-2026-46307 | HIGH | 8.3 | 0.2% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent repor... |
| CVE-2026-46306 | HIGH | 7.5 | 0.4% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RF... |
| CVE-2026-46304 | HIGH | 7.5 | 0.4% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl... |
| CVE-2026-46303 | HIGH | 8.2 | 0.3% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent a... |
| CVE-2026-46301 | HIGH | 7.8 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Gi... |
| CVE-2026-46299 | HIGH | 7 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super(... |
| CVE-2026-46294 | HIGH | 7.8 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony... |
| CVE-2026-46293 | HIGH | 7.1 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix out of bounds access ... |
| CVE-2026-46288 | HIGH | 8.4 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in of_unittest_cha... |
| CVE-2026-46285 | HIGH | 7.8 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3_release() ... |
| CVE-2026-46281 | HIGH | 7.8 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align... |
| CVE-2026-46280 | HIGH | 7.8 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: lib: test_hmm: evict device pages on file close to ... |
| CVE-2026-46279 | HIGH | 7.8 | 0.2% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm/alloc_tag: clear codetag for pages allocated bef... |
| CVE-2026-46277 | HIGH | 7.8 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm/zone_device: do not touch device folio after cal... |
| CVE-2026-39910 | HIGH | 8.8 | 0.3% | Jun 8, 2026 | STACKIT IaaS API contains a missing authorization check vulnerability that allows authenticated, low-privileged attacker... |
| CVE-2026-39908 | HIGH | 7.1 | 0.3% | Jun 8, 2026 | OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers... |
| CVE-2026-25856 | HIGH | 8.8 | 0.5% | Jun 8, 2026 | OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability that allows authenticate... |
| CVE-2026-25855 | HIGH | 8.8 | 0.6% | Jun 8, 2026 | OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to exec... |
| CVE-2026-25559 | HIGH | 8.8 | 0.6% | Jun 8, 2026 | OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authentic... |
| CVE-2026-11531 | HIGH | 7.3 | 0.3% | Jun 8, 2026 | A security flaw has been discovered in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46... |
| CVE-2026-11530 | HIGH | 7.3 | 0.3% | Jun 8, 2026 | A vulnerability was identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Thi... |
| CVE-2026-49975 | HIGH | 7.5 | 28.0% | Jun 8, 2026 | Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service vi... |
| CVE-2026-49755 | HIGH | 7.5 | 0.4% | Jun 8, 2026 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-control... |
| CVE-2026-48913 | HIGH | 7.3 | 0.5% | Jun 8, 2026 | Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now