2026 CVE Vulnerabilities
64,779 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-50125 | HIGH | 7.5 | 0.6% | Sep 17, 2026 | MKP is a Model Context Protocol server for Kubernetes. Prior to 0.4.1, cmd/server/main.go exposes the default HTTP endpo... |
| CVE-2026-45726 | HIGH | 7.6 | 0.1% | Sep 17, 2026 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a st... |
| CVE-2026-45720 | HIGH | 7 | 0.1% | Sep 17, 2026 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.7.3, SAML.... |
| CVE-2026-92230 | HIGH | 7.5 | — | Sep 17, 2026 | Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container thr... |
| CVE-2026-90997 | HIGH | 7.4 | 0.4% | Sep 17, 2026 | A flaw was found in Keycloak. When deployed in stateless mode with MySQL or MariaDB, a mismatch in row-count semantics b... |
| CVE-2026-55062 | HIGH | 8.4 | 0.1% | Sep 17, 2026 | uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget... |
| CVE-2026-54571 | HIGH | 8.7 | 0.5% | Sep 17, 2026 | ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3... |
| CVE-2026-54524 | HIGH | 7.1 | — | Sep 17, 2026 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.7.0, an authenticated user with the ... |
| CVE-2026-54504 | HIGH | 8.8 | — | Sep 17, 2026 | MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13... |
| CVE-2026-54451 | HIGH | 8.2 | 0.5% | Sep 17, 2026 | Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attack... |
| CVE-2026-54253 | HIGH | 8.2 | 0.2% | Sep 17, 2026 | TS3 Manager is modern web interface for maintaining Teamspeak3 servers. Prior to 2.2.6, the /api/download handler in pac... |
| CVE-2026-54239 | HIGH | 8.8 | 0.3% | Sep 17, 2026 | Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertex... |
| CVE-2026-52851 | HIGH | 7.1 | — | Sep 17, 2026 | Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated, non-readonly user with access to an ob... |
| CVE-2026-52727 | HIGH | 7.2 | — | Sep 17, 2026 | lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publica... |
| CVE-2026-19477 | HIGH | 7.8 | — | Sep 17, 2026 | There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This... |
| CVE-2026-92926 | HIGH | 7.3 | — | Sep 17, 2026 | A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepar... |
| CVE-2026-54446 | HIGH | 8.1 | — | Sep 17, 2026 | NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensi... |
| CVE-2026-52836 | HIGH | 8.7 | 0.7% | Sep 17, 2026 | OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior... |
| CVE-2026-44236 | HIGH | 7.1 | 0.5% | Sep 17, 2026 | rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an unders... |
| CVE-2026-93296 | HIGH | 8.5 | 0.3% | Sep 17, 2026 | MISP contains a stored cross-site scripting (XSS) vulnerability in the Overmind theme's statistics views. The event Gene... |
| CVE-2026-93295 | HIGH | 8.7 | 0.5% | Sep 17, 2026 | MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user... |
| CVE-2026-93292 | HIGH | 8.5 | 0.3% | Sep 17, 2026 | SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints tha... |
| CVE-2026-93203 | HIGH | 7.1 | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parall... |
| CVE-2026-93201 | HIGH | 7.8 | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent m... |
| CVE-2026-93196 | HIGH | 8.4 | — | Sep 17, 2026 | In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtio_pmem: refcount requests for token li... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now