2026 CVE Vulnerabilities
51,117 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-41493 | HIGH | 7.5 | 0.4% | May 8, 2026 | YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability was discovered in YARD when u... |
| CVE-2026-41491 | HIGH | 8.1 | 0.3% | May 8, 2026 | Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. From versions 1.3... |
| CVE-2026-39816 | HIGH | 8.8 | 0.8% | May 8, 2026 | The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Requi... |
| CVE-2026-8077 | HIGH | 8.6 | 0.2% | May 8, 2026 | Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend ... |
| CVE-2026-25077 | HIGH | 8.8 | 0.7% | May 8, 2026 | Account users are allowed by default to register templates to be downloaded directly to the primary storage for deployin... |
| CVE-2026-7330 | HIGH | 7.2 | 0.4% | May 8, 2026 | The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and includ... |
| CVE-2026-5127 | HIGH | 8.8 | 1.0% | May 8, 2026 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordP... |
| CVE-2026-43284 | HIGH | 8.8 | 93.2% | May 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb fra... |
| CVE-2026-8069 | HIGH | 7.8 | 0.1% | May 8, 2026 | PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes ... |
| CVE-2026-4935 | HIGH | 8.6 | 0.3% | May 8, 2026 | The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before ... |
| CVE-2026-8148 | HIGH | 7.8 | 0.1% | May 8, 2026 | NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM... |
| CVE-2026-8138 | HIGH | 8.8 | 0.6% | May 8, 2026 | A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /gof... |
| CVE-2026-8137 | HIGH | 8.8 | 0.5% | May 8, 2026 | A vulnerability has been found in Totolink X5000R 9.1.0u.6369_B20230113. This vulnerability affects the function sub_458... |
| CVE-2026-42278 | HIGH | 8.8 | 0.4% | May 8, 2026 | UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine implementation of Sm... |
| CVE-2026-8133 | HIGH | 7.3 | 0.3% | May 8, 2026 | A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0. Affected by this vulnerability is an unknow... |
| CVE-2026-8132 | HIGH | 7.3 | 0.3% | May 8, 2026 | A weakness has been identified in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /lo... |
| CVE-2026-8131 | HIGH | 7.3 | 0.3% | May 8, 2026 | A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impacts an unknown function of the f... |
| CVE-2026-8130 | HIGH | 7.3 | 0.3% | May 8, 2026 | A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an unknown function of the file /... |
| CVE-2026-8129 | HIGH | 7.3 | 0.3% | May 8, 2026 | A vulnerability was determined in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of... |
| CVE-2026-43943 | HIGH | 7.8 | 0.2% | May 8, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code... |
| CVE-2026-43940 | HIGH | 8.4 | 0.2% | May 8, 2026 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the r... |
| CVE-2026-42275 | HIGH | 8.7 | 0.3% | May 8, 2026 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.2, the zrok WebDAV drive b... |
| CVE-2026-42274 | HIGH | 7.8 | 0.4% | May 8, 2026 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall ... |
| CVE-2026-42273 | HIGH | 7.8 | 0.3% | May 8, 2026 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall ... |
| CVE-2026-42272 | HIGH | 7.8 | 0.4% | May 8, 2026 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now