2026 CVE Vulnerabilities
50,938 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-67858 | HIGH | 7.5 | 0.5% | Aug 4, 2026 | Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast di... |
| CVE-2026-67857 | HIGH | 7.5 | 0.4% | Aug 4, 2026 | open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/u... |
| CVE-2026-67856 | HIGH | 7.5 | 0.2% | Aug 4, 2026 | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscri... |
| CVE-2026-67855 | HIGH | 7.5 | 0.2% | Aug 4, 2026 | open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMA... |
| CVE-2026-52370 | MEDIUM | 6.1 | 0.2% | Aug 4, 2026 | A reflected cross-site scripting (XSS) vulnerability in the Forum posting function of O2OA v10 allows attackers to execu... |
| CVE-2026-51144 | MEDIUM | 6.1 | 0.2% | Aug 4, 2026 | Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker ... |
| CVE-2026-45103 | HIGH | 7.5 | 0.3% | Aug 4, 2026 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP... |
| CVE-2026-45100 | CRITICAL | 9.1 | 0.6% | Aug 4, 2026 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta ... |
| CVE-2026-45084 | HIGH | 8.7 | 0.5% | Aug 4, 2026 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions 3.4.0 through 3.6.5 contain a denial of ... |
| CVE-2026-18817 | LOW | 2.2 | 0.2% | Aug 4, 2026 | A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAut... |
| CVE-2026-18816 | MEDIUM | 5 | 0.3% | Aug 4, 2026 | A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the function verify of the file... |
| CVE-2026-18814 | HIGH | 7.3 | 2.7% | Aug 4, 2026 | A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of the file /api/esps. Th... |
| CVE-2026-70588 | MEDIUM | 5 | 0.3% | Aug 4, 2026 | Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin fail... |
| CVE-2026-70554 | CRITICAL | 9.8 | 0.9% | Aug 4, 2026 | MaxSite CMS contains a PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary cod... |
| CVE-2026-70494 | HIGH | 8.1 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, the DELE... |
| CVE-2026-70493 | MEDIUM | 6.5 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the built... |
| CVE-2026-70492 | HIGH | 8.7 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/... |
| CVE-2026-70491 | MEDIUM | 6.5 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /ap... |
| CVE-2026-70490 | MEDIUM | 6.3 | 0.2% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, the termi... |
| CVE-2026-70489 | MEDIUM | 6.5 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, automatio... |
| CVE-2026-70488 | MEDIUM | 4.3 | 0.2% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync ... |
| CVE-2026-70487 | MEDIUM | 5.3 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, inline di... |
| CVE-2026-67979 | CRITICAL | 9.1 | 0.2% | Aug 4, 2026 | Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows at... |
| CVE-2026-66902 | CRITICAL | 9.8 | 0.4% | Aug 4, 2026 | Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated sy... |
| CVE-2026-66901 | HIGH | 7.5 | 0.3% | Aug 4, 2026 | Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now