2026 CVE Vulnerabilities
50,938 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-68074 | HIGH | 7.5 | 0.2% | Aug 5, 2026 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to deni... |
| CVE-2026-68060 | HIGH | 7.5 | 0.4% | Aug 5, 2026 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential... |
| CVE-2026-67589 | HIGH | 7.5 | 0.4% | Aug 5, 2026 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential... |
| CVE-2026-67588 | HIGH | 7.5 | 0.4% | Aug 5, 2026 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to deni... |
| CVE-2026-67551 | HIGH | 7.5 | 0.4% | Aug 5, 2026 | pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential d... |
| CVE-2026-67465 | HIGH | 7.5 | 0.2% | Aug 5, 2026 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to deni... |
| CVE-2026-66839 | HIGH | 8.4 | 0.1% | Aug 5, 2026 | NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerabil... |
| CVE-2026-66344 | MEDIUM | 5.4 | 0.1% | Aug 5, 2026 | NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerabi... |
| CVE-2026-66273 | HIGH | 7.5 | 0.2% | Aug 5, 2026 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential... |
| CVE-2026-66257 | HIGH | 7.5 | 0.2% | Aug 5, 2026 | A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to deni... |
| CVE-2026-5062 | MEDIUM | 4.9 | 0.3% | Aug 5, 2026 | The PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPre... |
| CVE-2026-55707 | HIGH | 7.1 | 0.5% | Aug 5, 2026 | In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An au... |
| CVE-2026-18903 | MEDIUM | 4.3 | 0.4% | Aug 5, 2026 | A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects so... |
| CVE-2026-18902 | HIGH | 7.3 | 2.4% | Aug 5, 2026 | A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function esps.wan.repeater.set/... |
| CVE-2026-18322 | HIGH | 8.8 | 0.3% | Aug 5, 2026 | The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and inclu... |
| CVE-2026-16143 | HIGH | 7.2 | 0.2% | Aug 5, 2026 | The VikRentItems – Flexible Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting v... |
| CVE-2026-15941 | MEDIUM | 6.5 | 0.2% | Aug 5, 2026 | The plugin provides an Admin Search page that allows users with the `edit_posts` capability to run Relevanssi searches f... |
| CVE-2026-15918 | HIGH | 7.5 | 0.4% | Aug 5, 2026 | VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of t... |
| CVE-2026-11421 | MEDIUM | 6.5 | 0.3% | Aug 5, 2026 | The ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support plugin for WordPress is vulnerable to SQL Inje... |
| CVE-2026-18901 | HIGH | 7.3 | 0.5% | Aug 5, 2026 | A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/e... |
| CVE-2026-18900 | HIGH | 7.3 | 2.4% | Aug 5, 2026 | A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the co... |
| CVE-2026-18898 | HIGH | 8.8 | 0.5% | Aug 5, 2026 | A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the fil... |
| CVE-2026-18907 | HIGH | 7.5 | 0.2% | Aug 5, 2026 | Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via direc... |
| CVE-2026-18897 | HIGH | 8.8 | 0.6% | Aug 5, 2026 | A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strc... |
| CVE-2026-18896 | MEDIUM | 6.3 | 0.2% | Aug 5, 2026 | A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown fun... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now