2026 CVE Vulnerabilities
43,274 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-70479 | HIGH | 7.7 | 0.3% | Aug 4, 2026 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, with WEB_... |
| CVE-2026-70476 | HIGH | 8.3 | 0.3% | Aug 4, 2026 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organiz... |
| CVE-2026-70475 | HIGH | 7.1 | — | Aug 4, 2026 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the PUT /api/v1... |
| CVE-2026-47682 | HIGH | 7.1 | 0.3% | Aug 4, 2026 | CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.6.0 through 2.64.0... |
| CVE-2026-18810 | HIGH | 7.3 | 0.4% | Aug 4, 2026 | A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard... |
| CVE-2026-18657 | HIGH | 8.5 | 0.2% | Aug 4, 2026 | An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated ac... |
| CVE-2026-18656 | HIGH | 8.5 | 0.2% | Aug 4, 2026 | An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated a... |
| CVE-2026-16793 | HIGH | 8.8 | 0.4% | Aug 4, 2026 | An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo ... |
| CVE-2026-16792 | HIGH | 7 | 0.1% | Aug 4, 2026 | An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 micr... |
| CVE-2026-70474 | HIGH | 7.6 | 0.3% | Aug 4, 2026 | Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flow... |
| CVE-2026-70473 | HIGH | 8.3 | — | Aug 4, 2026 | Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flow... |
| CVE-2026-70472 | HIGH | 7.1 | 0.2% | Aug 4, 2026 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise openai-... |
| CVE-2026-70471 | HIGH | 7.1 | — | Aug 4, 2026 | Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flow... |
| CVE-2026-69704 | HIGH | 7 | 0.3% | Aug 4, 2026 | Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsan... |
| CVE-2026-69702 | HIGH | 7.1 | 0.3% | Aug 4, 2026 | SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated a... |
| CVE-2026-47781 | HIGH | 8.4 | 0.1% | Aug 4, 2026 | PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-... |
| CVE-2026-47764 | HIGH | 8.4 | 0.1% | Aug 4, 2026 | pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnera... |
| CVE-2026-13229 | HIGH | 7.1 | 0.2% | Aug 4, 2026 | Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning end... |
| CVE-2026-47623 | HIGH | 8.2 | 0.3% | Aug 4, 2026 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A succ... |
| CVE-2026-47619 | HIGH | 8.1 | 0.4% | Aug 4, 2026 | NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A s... |
| CVE-2026-47618 | HIGH | 7.5 | 0.3% | Aug 4, 2026 | NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause serv... |
| CVE-2026-47617 | HIGH | 7.5 | 0.3% | Aug 4, 2026 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side... |
| CVE-2026-47616 | HIGH | 7.5 | 0.3% | Aug 4, 2026 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side... |
| CVE-2026-47615 | HIGH | 7.5 | 0.3% | Aug 4, 2026 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a ... |
| CVE-2026-47614 | HIGH | 7.5 | 0.3% | Aug 4, 2026 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful e... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now