2026 CVE Vulnerabilities
50,938 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-65986 | HIGH | 8.5 | 0.2% | Aug 4, 2026 | CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 co... |
| CVE-2026-54020 | MEDIUM | 6.3 | 0.2% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.0, Open WebUI resolv... |
| CVE-2026-51401 | HIGH | 7.7 | 0.2% | Aug 4, 2026 | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename(... |
| CVE-2026-51400 | HIGH | 8.4 | 0.1% | Aug 4, 2026 | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename(... |
| CVE-2026-45538 | CRITICAL | 9.8 | 0.5% | Aug 4, 2026 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions 4.0.0 and prior, processing a SIP mes... |
| CVE-2026-18813 | HIGH | 7.3 | 2.3% | Aug 4, 2026 | A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /api/esps. The manipul... |
| CVE-2026-18812 | HIGH | 7.3 | 2.3% | Aug 4, 2026 | A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Ex... |
| CVE-2026-18811 | HIGH | 7.3 | 2.3% | Aug 4, 2026 | A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Perfo... |
| CVE-2026-13227 | HIGH | 7.1 | 0.2% | Aug 4, 2026 | An Improper Authorization vulnerability exists in ERPNext version <v16.25.0 and <15.115.0 due to insufficient access co... |
| CVE-2026-70553 | CRITICAL | 9.8 | 0.9% | Aug 4, 2026 | MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary PHP... |
| CVE-2026-70552 | CRITICAL | 9.8 | 0.6% | Aug 4, 2026 | MaxSite CMS 109.5 and earlier contains an authentication bypass vulnerability in the AJAX dispatcher that allows unauthe... |
| CVE-2026-70486 | HIGH | 8.2 | 0.4% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, the termi... |
| CVE-2026-70485 | HIGH | 7.1 | 0.2% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, Open WebU... |
| CVE-2026-70484 | MEDIUM | 4.3 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.0, the legac... |
| CVE-2026-70483 | LOW | 3.1 | 0.2% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /a... |
| CVE-2026-70482 | HIGH | 8.1 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENAB... |
| CVE-2026-70481 | MEDIUM | 5.4 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the stand... |
| CVE-2026-70480 | MEDIUM | 4.1 | 0.2% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.34 until 0.11.0, Open Web... |
| CVE-2026-70479 | HIGH | 7.7 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, with WEB_... |
| CVE-2026-70478 | CRITICAL | 9.2 | 0.4% | Aug 4, 2026 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the POST /api/v... |
| CVE-2026-70477 | CRITICAL | 9.5 | 0.4% | Aug 4, 2026 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, a prompt inject... |
| CVE-2026-70476 | HIGH | 8.3 | 0.3% | Aug 4, 2026 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organiz... |
| CVE-2026-70475 | HIGH | 7.1 | — | Aug 4, 2026 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the PUT /api/v1... |
| CVE-2026-48154 | MEDIUM | 5.9 | 0.2% | Aug 4, 2026 | GoRest is a Golang starter kit built with the Gin framework for prototyping and developing RESTful APIs. In versions pri... |
| CVE-2026-47682 | HIGH | 7.1 | 0.3% | Aug 4, 2026 | CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.6.0 through 2.64.0... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now