2026 CVE Vulnerabilities
53,128 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16581 | MEDIUM | 6.9 | 0.2% | Jul 28, 2026 | In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulner... |
| CVE-2026-15328 | HIGH | 8.1 | 0.2% | Jul 28, 2026 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 i... |
| CVE-2026-15325 | HIGH | 8.7 | 0.2% | Jul 28, 2026 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling ... |
| CVE-2026-15280 | HIGH | 7.5 | 0.3% | Jul 28, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segm... |
| CVE-2026-15064 | HIGH | 8.7 | 0.2% | Jul 28, 2026 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 i... |
| CVE-2026-15057 | HIGH | 7.5 | 0.3% | Jul 28, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontr... |
| CVE-2026-14996 | HIGH | 8.2 | 0.2% | Jul 28, 2026 | IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management. |
| CVE-2026-14981 | HIGH | 7.5 | 0.3% | Jul 28, 2026 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 a... |
| CVE-2026-14976 | CRITICAL | 9.8 | 0.2% | Jul 28, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the colle... |
| CVE-2026-14974 | CRITICAL | 9.8 | 0.4% | Jul 28, 2026 | IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused... |
| CVE-2026-14973 | CRITICAL | 9.3 | 0.5% | Jul 28, 2026 | IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's s... |
| CVE-2026-14959 | HIGH | 7.2 | 1.0% | Jul 28, 2026 | IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to ... |
| CVE-2026-14958 | HIGH | 7.2 | 0.5% | Jul 28, 2026 | IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to ... |
| CVE-2026-14893 | HIGH | 7.3 | 0.3% | Jul 28, 2026 | IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core ... |
| CVE-2026-14528 | HIGH | 7.5 | 0.3% | Jul 28, 2026 | IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information. |
| CVE-2026-14515 | MEDIUM | 6.1 | 0.2% | Jul 28, 2026 | IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scriptin... |
| CVE-2026-14512 | CRITICAL | 9.8 | 0.5% | Jul 28, 2026 | IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization whi... |
| CVE-2026-14446 | CRITICAL | 9.8 | 0.3% | Jul 28, 2026 | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the adminis... |
| CVE-2026-13463 | HIGH | 7.5 | 0.2% | Jul 28, 2026 | IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of creden... |
| CVE-2026-13442 | HIGH | 7.1 | 0.2% | Jul 28, 2026 | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only... |
| CVE-2026-57511 | MEDIUM | 6.3 | 0.2% | Jul 28, 2026 | SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows unauthenticated attackers to inject... |
| CVE-2026-57510 | HIGH | 8.8 | 0.3% | Jul 28, 2026 | SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers t... |
| CVE-2026-55555 | HIGH | 7.5 | 0.5% | Jul 28, 2026 | Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack thr... |
| CVE-2026-55554 | HIGH | 7.5 | 0.3% | Jul 28, 2026 | Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri() method enforces chroot bo... |
| CVE-2026-48060 | HIGH | 8.1 | 0.3% | Jul 28, 2026 | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar instances which... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now