2026 CVE Vulnerabilities
50,938 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-48695 | HIGH | 8.1 | 1.1% | May 26, 2026 | FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integra... |
| CVE-2026-48694 | HIGH | 8.1 | 0.2% | May 26, 2026 | FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integr... |
| CVE-2026-44730 | HIGH | 7.2 | 0.3% | May 26, 2026 | OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an ... |
| CVE-2026-44728 | HIGH | 7.8 | 0.1% | May 26, 2026 | Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel... |
| CVE-2026-44706 | HIGH | 8.5 | 0.2% | May 26, 2026 | Chatwoot is a customer engagement suite. From 2.2.0 to before 4.11.2, a SQL injection vulnerability exists in the conver... |
| CVE-2026-44669 | HIGH | 8.7 | 0.2% | May 26, 2026 | FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored c... |
| CVE-2026-44667 | HIGH | 8.7 | 0.2% | May 26, 2026 | FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored c... |
| CVE-2026-24200 | HIGH | 7 | 0.2% | May 26, 2026 | NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could cause a use-after-free... |
| CVE-2026-24196 | HIGH | 7.1 | 0.2% | May 26, 2026 | NVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of-bounds read. A successful ex... |
| CVE-2026-24194 | HIGH | 7.8 | 0.2% | May 26, 2026 | NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improp... |
| CVE-2026-24193 | HIGH | 7.8 | 0.2% | May 26, 2026 | NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds writ... |
| CVE-2026-24192 | HIGH | 7.8 | 0.2% | May 26, 2026 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between n... |
| CVE-2026-24191 | HIGH | 7.8 | 0.1% | May 26, 2026 | NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use iss... |
| CVE-2026-24190 | HIGH | 7.8 | 0.2% | May 26, 2026 | NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause ... |
| CVE-2026-24187 | HIGH | 8.8 | 0.2% | May 26, 2026 | NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful ex... |
| CVE-2026-9562 | HIGH | 7.3 | 0.3% | May 26, 2026 | A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Th... |
| CVE-2026-8852 | HIGH | 7.5 | 0.2% | May 26, 2026 | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_fastcgi module. |
| CVE-2026-8850 | HIGH | 7.5 | 0.4% | May 26, 2026 | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload. |
| CVE-2026-48901 | HIGH | 7.5 | 0.2% | May 26, 2026 | The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key. |
| CVE-2026-48897 | HIGH | 7.5 | 0.2% | May 26, 2026 | Insufficient state checks lead to a vector that allows to bypass 2FA checks. |
| CVE-2026-48896 | HIGH | 7.5 | 0.3% | May 26, 2026 | Insufficient state checks lead to a vector that allows to bypass 2FA checks. |
| CVE-2026-48864 | HIGH | 7.8 | 0.2% | May 26, 2026 | A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed... |
| CVE-2026-48697 | HIGH | 7.4 | 0.2% | May 26, 2026 | FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_w... |
| CVE-2026-48690 | HIGH | 7.1 | 0.1% | May 26, 2026 | FastNetMon Community Edition through 1.2.9 contains an integer overflow vulnerability in the packet capture buffer alloc... |
| CVE-2026-48126 | HIGH | 8.2 | 0.3% | May 26, 2026 | Algernon is a small self-contained pure-Go web server. Prior to 1.17.8, when algernon is started with --domain (or --let... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now