2026 CVE Vulnerabilities
51,104 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-11383 | MEDIUM | 5.4 | 0.2% | Jul 30, 2026 | IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scri... |
| CVE-2026-67351 | HIGH | 8.8 | 0.4% | Jul 30, 2026 | Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and sessio... |
| CVE-2026-60075 | HIGH | 7.5 | 0.4% | Jul 30, 2026 | Date::Manip versions through 6.99 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substi... |
| CVE-2026-60074 | HIGH | 7.5 | 0.4% | Jul 30, 2026 | Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric ran... |
| CVE-2026-5219 | HIGH | 8.3 | — | Jul 30, 2026 | Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows C... |
| CVE-2026-58218 | MEDIUM | 5.3 | — | Jul 30, 2026 | A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY ... |
| CVE-2026-57859 | HIGH | 7.7 | — | Jul 30, 2026 | e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that allows a... |
| CVE-2026-56428 | HIGH | 8.1 | — | Jul 30, 2026 | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly... |
| CVE-2026-41709 | LOW | 2.7 | — | Jul 30, 2026 | VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform... |
| CVE-2026-12722 | HIGH | 8.2 | — | Jul 30, 2026 | Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel a... |
| CVE-2026-59310 | CRITICAL | 9.8 | 1.1% | Jul 30, 2026 | VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access ... |
| CVE-2026-59309 | CRITICAL | 9.8 | 8.2% | Jul 30, 2026 | VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with n... |
| CVE-2026-54368 | HIGH | 8.8 | — | Jul 30, 2026 | CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows... |
| CVE-2026-54367 | HIGH | 8.8 | — | Jul 30, 2026 | CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, w... |
| CVE-2026-54366 | HIGH | 8.7 | — | Jul 30, 2026 | CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthenticated attack... |
| CVE-2026-54365 | HIGH | 8.7 | 0.2% | Jul 30, 2026 | CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthe... |
| CVE-2026-54364 | MEDIUM | 6.9 | — | Jul 30, 2026 | CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inj... |
| CVE-2026-54363 | CRITICAL | 9.3 | — | Jul 30, 2026 | CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to fo... |
| CVE-2026-47876 | CRITICAL | 9.3 | — | Jul 30, 2026 | VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with ... |
| CVE-2026-41703 | HIGH | 7.6 | — | Jul 30, 2026 | VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment pr... |
| CVE-2026-7260 | MEDIUM | 5.5 | 0.2% | Jul 30, 2026 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP ... |
| CVE-2026-5582 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | The FuseWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.24... |
| CVE-2026-18382 | MEDIUM | 6.8 | 0.3% | Jul 30, 2026 | A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able... |
| CVE-2026-18381 | HIGH | 7.6 | 0.2% | Jul 30, 2026 | A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom r... |
| CVE-2026-18378 | MEDIUM | 6.8 | 0.2% | Jul 30, 2026 | A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able t... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now