2026 CVE Vulnerabilities
49,873 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-6455 | HIGH | 8.1 | 0.2% | May 28, 2026 | The WP Contact Form 7 DB Handler plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Arbitrary F... |
| CVE-2026-44604 | HIGH | 7 | 0.6% | May 28, 2026 | A command injection vulnerability was discovered in the `rpmuncompress` utility of RPM. When extracting certain archive ... |
| CVE-2026-9009 | HIGH | 8.8 | 0.4% | May 28, 2026 | The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all vers... |
| CVE-2026-9795 | HIGH | 7.3 | 0.3% | May 28, 2026 | A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with limited client man... |
| CVE-2026-9793 | HIGH | 7.5 | 0.2% | May 28, 2026 | A flaw was found in Keycloak. When a JSON Web Encryption (JWE) encrypted request object is submitted, Keycloak may incor... |
| CVE-2026-7802 | HIGH | 8.8 | 0.4% | May 28, 2026 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and i... |
| CVE-2026-32997 | HIGH | 8.6 | 0.5% | May 28, 2026 | A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-base... |
| CVE-2026-32996 | HIGH | 7.3 | 0.2% | May 28, 2026 | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. |
| CVE-2026-32995 | HIGH | 7.5 | 0.3% | May 28, 2026 | The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.5, <7... |
| CVE-2026-2374 | HIGH | 7.2 | 0.3% | May 28, 2026 | The Login No Captcha reCAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `$_SERVER['PHP_... |
| CVE-2026-9789 | HIGH | 8.5 | 0.2% | May 28, 2026 | A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052. The vulne... |
| CVE-2026-8915 | HIGH | 8.8 | 0.3% | May 28, 2026 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot:... |
| CVE-2026-46414 | HIGH | 8.8 | 0.5% | May 27, 2026 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro... |
| CVE-2026-46402 | HIGH | 8.1 | 0.7% | May 27, 2026 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Micro... |
| CVE-2026-45322 | HIGH | 7.8 | 1.7% | May 27, 2026 | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releas... |
| CVE-2026-9208 | HIGH | 8.8 | 0.4% | May 27, 2026 | Tanium addressed an unauthorized code execution vulnerability in Connect. |
| CVE-2026-45152 | HIGH | 7.8 | 0.7% | May 27, 2026 | uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command injection vulnerability ex... |
| CVE-2026-44247 | HIGH | 7.4 | 0.2% | May 27, 2026 | Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook serv... |
| CVE-2026-47269 | HIGH | 7.4 | 0.3% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb's deny_remot... |
| CVE-2026-45137 | HIGH | 8.2 | 0.2% | May 27, 2026 | Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to before 1.0... |
| CVE-2026-45136 | HIGH | 7.8 | 0.2% | May 27, 2026 | claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.... |
| CVE-2026-44713 | HIGH | 8.8 | 0.2% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/tmux.c reads the ... |
| CVE-2026-44712 | HIGH | 8.2 | 0.2% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, a crafted UUID such a... |
| CVE-2026-44711 | HIGH | 7.9 | 0.2% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pa... |
| CVE-2026-44709 | HIGH | 7.8 | 0.2% | May 27, 2026 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, pamusb-pinentry reads... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now