2026 CVE Vulnerabilities
51,016 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-34641 | HIGH | 7.8 | 0.1% | Jul 31, 2026 | Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co... |
| CVE-2026-68771 | CRITICAL | 9.8 | 0.6% | Jul 31, 2026 | ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthentic... |
| CVE-2026-52371 | MEDIUM | 6.5 | 0.2% | Jul 31, 2026 | A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticat... |
| CVE-2026-52232 | MEDIUM | 6.1 | 0.1% | Jul 31, 2026 | A reflected cross-site scripting (XSS) vulnerability in the /logo.asp component of FS Inc S3150-8T2F Switch 2.2.0D Build... |
| CVE-2026-52134 | CRITICAL | 9.8 | 0.3% | Jul 31, 2026 | An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows attackers to bypass au... |
| CVE-2026-51953 | HIGH | 7.4 | 0.2% | Jul 31, 2026 | An issue in FeehiCMS v.2.1.1 allows an attacker to escalate privileges via the Session management module, authentication... |
| CVE-2026-45086 | MEDIUM | 5.4 | 0.2% | Jul 31, 2026 | Decidim is a participatory democracy framework. From 0.31.1 before 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, a partici... |
| CVE-2026-68770 | CRITICAL | 9.8 | 0.5% | Jul 31, 2026 | sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code e... |
| CVE-2026-65981 | HIGH | 7.1 | 0.3% | Jul 31, 2026 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenti... |
| CVE-2026-51785 | CRITICAL | 9.8 | 0.4% | Jul 31, 2026 | An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted req... |
| CVE-2026-50986 | HIGH | 8.8 | 0.1% | Jul 31, 2026 | PrestaShop module, totadministrativemandate <1.8.1 is vulnerable to Cross Site Request Forgery (CSRF). The payment valid... |
| CVE-2026-38713 | CRITICAL | 9.8 | 1.2% | Jul 31, 2026 | TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2... |
| CVE-2026-38710 | HIGH | 7.2 | 1.2% | Jul 31, 2026 | TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock in... |
| CVE-2026-38708 | CRITICAL | 9.8 | 1.2% | Jul 31, 2026 | TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2... |
| CVE-2026-65841 | MEDIUM | 5.3 | — | Jul 31, 2026 | Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTa... |
| CVE-2026-62999 | HIGH | 7.5 | — | Jul 31, 2026 | Copier is a library and CLI app for rendering project templates. From 9.5.0 through 9.16.0, percent-encoded parent-direc... |
| CVE-2026-62959 | HIGH | 8.2 | — | Jul 31, 2026 | Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started w... |
| CVE-2026-62324 | MEDIUM | 5.4 | 0.2% | Jul 31, 2026 | Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.12.31, Jodit's sanitizeHTMLElem... |
| CVE-2026-55825 | LOW | 3.1 | — | Jul 31, 2026 | Contao is an Open Source CMS. In versions 5.7.0 through 5.7.6, an authenticated backend user who can access one job can ... |
| CVE-2026-53599 | HIGH | 7.5 | — | Jul 31, 2026 | REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rex_mediapool::isAllowedExtension in redaxo/s... |
| CVE-2026-53551 | MEDIUM | 6.9 | 0.4% | Jul 31, 2026 | free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF (Authentication Server... |
| CVE-2026-53510 | HIGH | 8.1 | — | Jul 31, 2026 | Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL... |
| CVE-2026-38711 | CRITICAL | 9.8 | 1.2% | Jul 31, 2026 | TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2... |
| CVE-2026-18394 | HIGH | 7.4 | 0.3% | Jul 31, 2026 | Incorrect authorization in the http_request tool in Strands Agents Tools before 0.8.2 might allow remote attackers to ob... |
| CVE-2026-57232 | LOW | 3.1 | 0.2% | Jul 31, 2026 | Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end mod... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now