2026 CVE Vulnerabilities
48,586 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-43306 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: bpf: crypto: Use the correct destructor kfunc type ... |
| CVE-2026-43305 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix mismatched unlock for DMUB HW ... |
| CVE-2026-43302 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Set DMA segment size to avoid debug warnin... |
| CVE-2026-43301 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix PM runtime usage cou... |
| CVE-2026-43300 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: Fix a possible null-pointer dereference ... |
| CVE-2026-43299 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT() when the fs flips RO inside ... |
| CVE-2026-43298 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip vcn poison irq release on VF VF d... |
| CVE-2026-43297 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rga: Fix possible ERR_PTR derefere... |
| CVE-2026-43295 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: rapidio: replace rio_free_net() with kfree() in rio... |
| CVE-2026-43294 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm: renesas: rz-du: mipi_dsi: fix kernel panic whe... |
| CVE-2026-43293 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix kthread worker destr... |
| CVE-2026-43292 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: prevent RCU stalls in kasan_release_vma... |
| CVE-2026-43289 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: kexec: derive purgatory entry from symbol kexec_lo... |
| CVE-2026-43288 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: ext4: move ext4_percpu_param_init() before ext4_mb_... |
| CVE-2026-43287 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm: Account property blob allocations to memcg DR... |
| CVE-2026-43286 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore failed global reservations to s... |
| CVE-2026-43285 | MEDIUM | 5.5 | 0.1% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not access current->mems_allowed_seq if... |
| CVE-2026-41423 | MEDIUM | 5.3 | 0.3% | May 8, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |
| CVE-2026-41161 | MEDIUM | 5.3 | 0.3% | May 8, 2026 | Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version... |
| CVE-2026-3318 | MEDIUM | 5.3 | 0.3% | May 8, 2026 | Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform. The vulnerability occurs in ... |
| CVE-2026-7650 | MEDIUM | 6.4 | 0.2% | May 8, 2026 | The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id'... |
| CVE-2026-7475 | MEDIUM | 6.4 | 0.2% | May 8, 2026 | The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `sky-custom-scripts` custom pos... |
| CVE-2026-5341 | MEDIUM | 6.4 | 0.3% | May 8, 2026 | The NMR Strava activities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `strava_nmr... |
| CVE-2026-44928 | MEDIUM | 5.3 | 0.2% | May 8, 2026 | In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal. |
| CVE-2026-44927 | MEDIUM | 5.3 | 0.2% | May 8, 2026 | In uriparser before 1.0.2, there is pointer difference truncation to int in various places. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now