2026 CVE Vulnerabilities
43,311 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-20727 | HIGH | 8.3 | 0.2% | Aug 11, 2026 | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a d... |
| CVE-2026-20716 | HIGH | 7.2 | 0.1% | Aug 11, 2026 | Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privile... |
| CVE-2026-20715 | HIGH | 8.2 | 0.3% | Aug 11, 2026 | Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(... |
| CVE-2026-20713 | MEDIUM | 4.5 | 0.1% | Aug 11, 2026 | Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalati... |
| CVE-2026-20708 | MEDIUM | 5.9 | 0.2% | Aug 11, 2026 | Insertion of sensitive information into log file in the subsystem for the Intel(R) AMT and Intel(R) Standard Manageabili... |
| CVE-2026-20707 | MEDIUM | 6.8 | 0.1% | Aug 11, 2026 | Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivilege... |
| CVE-2026-20705 | MEDIUM | 6.8 | 0.1% | Aug 11, 2026 | Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Dom... |
| CVE-2026-20702 | HIGH | 8.9 | 0.3% | Aug 11, 2026 | Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information ... |
| CVE-2026-20349 | HIGH | 8.6 | 1.0% | Aug 11, 2026 | A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwar... |
| CVE-2026-18247 | MEDIUM | 5.3 | — | Aug 11, 2026 | A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could al... |
| CVE-2026-12571 | CRITICAL | 9.8 | — | Aug 11, 2026 | An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover. |
| CVE-2026-9214 | MEDIUM | 4.3 | — | Aug 11, 2026 | Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected t... |
| CVE-2026-73080 | CRITICAL | 9.3 | — | Aug 11, 2026 | SeaweedFS is a distributed storage system. Prior to 4.24, VolumeServer.FetchAndWriteNeedle in weed/server/volume_grpc_re... |
| CVE-2026-73079 | HIGH | 8.5 | — | Aug 11, 2026 | Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0... |
| CVE-2026-73078 | HIGH | 8.6 | — | Aug 11, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runti... |
| CVE-2026-73077 | HIGH | 8.4 | — | Aug 11, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vi... |
| CVE-2026-73076 | HIGH | 8.4 | — | Aug 11, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimbal... |
| CVE-2026-73075 | MEDIUM | 4.6 | — | Aug 11, 2026 | Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupw... |
| CVE-2026-73074 | HIGH | 7.1 | 0.1% | Aug 11, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen va... |
| CVE-2026-73072 | HIGH | 8.5 | — | Aug 11, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] ... |
| CVE-2026-73071 | LOW | 3.3 | — | Aug 11, 2026 | Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can reta... |
| CVE-2026-73070 | MEDIUM | 6.8 | — | Aug 11, 2026 | Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c acce... |
| CVE-2026-73069 | CRITICAL | 9.1 | — | Aug 11, 2026 | Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.15.0, Twenty allowed a workspace ad... |
| CVE-2026-73068 | MEDIUM | 5.9 | — | Aug 11, 2026 | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI ... |
| CVE-2026-6727 | MEDIUM | 5.9 | 0.2% | Aug 11, 2026 | A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with a... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now