2026 CVE Vulnerabilities
50,404 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-6203 | MEDIUM | 6.1 | 0.7% | Apr 13, 2026 | The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5... |
| CVE-2026-39979 | MEDIUM | 6.5 | 0.6% | Apr 13, 2026 | jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() AP... |
| CVE-2026-39956 | MEDIUM | 6.1 | 0.2% | Apr 13, 2026 | jq is a command-line JSON processor. In commits after 69785bf77f86e2ea1b4a20ca86775916889e91c9, the _strindices builtin ... |
| CVE-2026-6220 | MEDIUM | 4.7 | 0.2% | Apr 13, 2026 | A vulnerability was identified in HummerRisk up to 1.5.0. This vulnerability affects the function ServerService.addServe... |
| CVE-2026-40312 | MEDIUM | 5.5 | 0.2% | Apr 13, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1... |
| CVE-2026-40311 | MEDIUM | 5.5 | 0.2% | Apr 13, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 a... |
| CVE-2026-40310 | MEDIUM | 5.5 | 0.2% | Apr 13, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2... |
| CVE-2026-40183 | MEDIUM | 5.5 | 0.2% | Apr 13, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1... |
| CVE-2026-40169 | MEDIUM | 5.5 | 0.2% | Apr 13, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1... |
| CVE-2026-34238 | MEDIUM | 5.5 | 0.1% | Apr 13, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.... |
| CVE-2026-33947 | MEDIUM | 5.5 | 0.2% | Apr 13, 2026 | jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), jv_getpath(), and delpaths_sor... |
| CVE-2026-33902 | MEDIUM | 5.5 | 0.1% | Apr 13, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.... |
| CVE-2026-6219 | MEDIUM | 5.3 | 0.7% | Apr 13, 2026 | A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2. This affects the function child_process.exec of ... |
| CVE-2026-6218 | MEDIUM | 5.3 | 0.3% | Apr 13, 2026 | A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue is the function createTextNode... |
| CVE-2026-33899 | MEDIUM | 5.3 | 0.4% | Apr 13, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-1... |
| CVE-2026-33740 | MEDIUM | 5.4 | 0.2% | Apr 13, 2026 | EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Em... |
| CVE-2026-31280 | MEDIUM | 6.5 | 0.4% | Apr 13, 2026 | An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause... |
| CVE-2026-26460 | MEDIUM | 6.1 | 0.2% | Apr 13, 2026 | A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neu... |
| CVE-2026-6215 | MEDIUM | 6.3 | 0.2% | Apr 13, 2026 | A weakness has been identified in DbGate up to 7.1.4. The impacted element is the function apiServerUrl1 of the file pac... |
| CVE-2026-6202 | MEDIUM | 6.3 | 0.2% | Apr 13, 2026 | A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file po... |
| CVE-2026-6201 | MEDIUM | 5.4 | 0.3% | Apr 13, 2026 | A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the fi... |
| CVE-2026-33657 | MEDIUM | 5.4 | 0.2% | Apr 13, 2026 | EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML inje... |
| CVE-2026-33534 | MEDIUM | 4.3 | 2.0% | Apr 13, 2026 | EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have an authenticated S... |
| CVE-2026-40041 | MEDIUM | 5.3 | 0.1% | Apr 13, 2026 | Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in a... |
| CVE-2026-6191 | MEDIUM | 6.3 | 0.2% | Apr 13, 2026 | A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an unknown function of t... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now