2026 CVE Vulnerabilities
51,094 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-67345 | HIGH | 8.5 | — | Jul 30, 2026 | MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in Defaul... |
| CVE-2026-65635 | HIGH | 8.3 | — | Jul 30, 2026 | Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid module) allows attack... |
| CVE-2026-54885 | MEDIUM | 6.9 | — | Jul 30, 2026 | Server-Side Request Forgery vulnerability in malach-it Boruta allows an unauthenticated remote attacker to cause the OAu... |
| CVE-2026-53431 | CRITICAL | 9.1 | — | Jul 30, 2026 | Authentication Bypass by Capture-replay vulnerability in malach-it Boruta allows an attacker who has obtained a previous... |
| CVE-2026-41187 | MEDIUM | 6.5 | 0.3% | Jul 30, 2026 | Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Dele... |
| CVE-2026-41186 | HIGH | 7.5 | 0.2% | Jul 30, 2026 | When Calico's shared debug server is enabled (disabled by default), the Calico kube-controllers and Goldmane components ... |
| CVE-2026-16308 | HIGH | 7.5 | — | Jul 30, 2026 | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remo... |
| CVE-2026-15435 | CRITICAL | 9.8 | 0.7% | Jul 30, 2026 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to t... |
| CVE-2026-14980 | HIGH | 8.8 | 0.2% | Jul 30, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which c... |
| CVE-2026-14522 | CRITICAL | 9.8 | 0.5% | Jul 30, 2026 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to e... |
| CVE-2026-14519 | HIGH | 7.5 | 0.6% | Jul 30, 2026 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to r... |
| CVE-2026-12947 | HIGH | 7.5 | — | Jul 30, 2026 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive infor... |
| CVE-2026-11980 | HIGH | 7.3 | 0.2% | Jul 30, 2026 | IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up. |
| CVE-2026-11897 | HIGH | 7.5 | 0.3% | Jul 30, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sen... |
| CVE-2026-11707 | CRITICAL | 9.3 | 0.2% | Jul 30, 2026 | IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site sc... |
| CVE-2026-11383 | MEDIUM | 5.4 | 0.2% | Jul 30, 2026 | IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scri... |
| CVE-2026-67351 | HIGH | 8.8 | 0.4% | Jul 30, 2026 | Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and sessio... |
| CVE-2026-60075 | HIGH | 7.5 | 0.4% | Jul 30, 2026 | Date::Manip versions through 6.99 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substi... |
| CVE-2026-60074 | HIGH | 7.5 | 0.4% | Jul 30, 2026 | Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric ran... |
| CVE-2026-5219 | HIGH | 8.3 | — | Jul 30, 2026 | Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows C... |
| CVE-2026-58218 | MEDIUM | 5.3 | — | Jul 30, 2026 | A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY ... |
| CVE-2026-57859 | HIGH | 7.7 | — | Jul 30, 2026 | e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that allows a... |
| CVE-2026-56428 | HIGH | 8.1 | — | Jul 30, 2026 | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly... |
| CVE-2026-41709 | LOW | 2.7 | — | Jul 30, 2026 | VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform... |
| CVE-2026-12722 | HIGH | 8.2 | — | Jul 30, 2026 | Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel a... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now