2026 CVE Vulnerabilities
49,638 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-31456 | MEDIUM | 4.7 | 0.1% | Apr 22, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split and ... |
| CVE-2026-31451 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUG_ON with proper error handling in ... |
| CVE-2026-31445 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committed c... |
| CVE-2026-31443 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is di... |
| CVE-2026-31441 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset... |
| CVE-2026-31440 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory Duri... |
| CVE-2026-31439 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap init error hand... |
| CVE-2026-31438 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel BUG in netfs_limit_iter() for ITE... |
| CVE-2026-31437 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix NULL pointer dereference in netfs_unbuff... |
| CVE-2026-31434 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix leak of kobject name for sub-group space... |
| CVE-2026-31192 | MEDIUM | 6.5 | 0.3% | Apr 22, 2026 | Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attacker... |
| CVE-2026-33601 | MEDIUM | 4.9 | 0.5% | Apr 22, 2026 | If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a ... |
| CVE-2026-33600 | MEDIUM | 4.9 | 0.5% | Apr 22, 2026 | An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistenc... |
| CVE-2026-33262 | MEDIUM | 5.9 | 0.4% | Apr 22, 2026 | An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leadin... |
| CVE-2026-33261 | MEDIUM | 5.9 | 0.2% | Apr 22, 2026 | A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service. |
| CVE-2026-33259 | MEDIUM | 5 | 0.2% | Apr 22, 2026 | Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the... |
| CVE-2026-1930 | MEDIUM | 4.3 | 0.3% | Apr 22, 2026 | The Emailchef plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check ... |
| CVE-2026-1913 | MEDIUM | 6.4 | 0.3% | Apr 22, 2026 | The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's login_li... |
| CVE-2026-1395 | MEDIUM | 6.4 | 0.2% | Apr 22, 2026 | The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's block_id at... |
| CVE-2026-6845 | MEDIUM | 5 | 0.1% | Apr 22, 2026 | A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to c... |
| CVE-2026-6844 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service ... |
| CVE-2026-6843 | MEDIUM | 5.5 | 0.1% | Apr 22, 2026 | A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By cr... |
| CVE-2026-6396 | MEDIUM | 4.3 | 0.2% | Apr 22, 2026 | The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and incl... |
| CVE-2026-6294 | MEDIUM | 4.3 | 0.2% | Apr 22, 2026 | The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and inclu... |
| CVE-2026-6246 | MEDIUM | 6.4 | 0.2% | Apr 22, 2026 | The Simple Random Posts Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'container_r... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now