2026 CVE Vulnerabilities
53,206 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-47078 | MEDIUM | 4.8 | 0.2% | Jul 27, 2026 | Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files outside the intended extrac... |
| CVE-2026-42792 | HIGH | 7.5 | 0.4% | Jul 27, 2026 | Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote att... |
| CVE-2026-17574 | MEDIUM | 5.5 | 0.1% | Jul 27, 2026 | HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an i... |
| CVE-2026-17573 | MEDIUM | 5.5 | 0.1% | Jul 27, 2026 | A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized c... |
| CVE-2026-17572 | MEDIUM | 5.5 | 0.1% | Jul 27, 2026 | Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows att... |
| CVE-2026-17530 | MEDIUM | 6.3 | — | Jul 27, 2026 | A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function ... |
| CVE-2026-17529 | MEDIUM | 6.3 | — | Jul 27, 2026 | A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/... |
| CVE-2026-16812 | CRITICAL | 10 | 1.0% | Jul 27, 2026 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privile... |
| CVE-2026-66477 | MEDIUM | 5.3 | — | Jul 27, 2026 | Unauthenticated Broken Access Control in Gillion <= 4.13 versions. |
| CVE-2026-66476 | MEDIUM | 4.9 | — | Jul 27, 2026 | Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions. |
| CVE-2026-66475 | MEDIUM | 5.9 | — | Jul 27, 2026 | Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 versi... |
| CVE-2026-66474 | MEDIUM | 4.3 | — | Jul 27, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT Script <= 1.1.8 versions. |
| CVE-2026-66448 | MEDIUM | 6.5 | — | Jul 27, 2026 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions. |
| CVE-2026-66445 | MEDIUM | 6.5 | — | Jul 27, 2026 | Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions. |
| CVE-2026-66442 | MEDIUM | 5.4 | — | Jul 27, 2026 | Subscriber Broken Access Control in YayPricing <= 3.5.6 versions. |
| CVE-2026-66438 | MEDIUM | 5.3 | — | Jul 27, 2026 | Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions. |
| CVE-2026-66437 | MEDIUM | 4.9 | — | Jul 27, 2026 | Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions. |
| CVE-2026-66434 | MEDIUM | 6.5 | — | Jul 27, 2026 | Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions. |
| CVE-2026-66433 | MEDIUM | 6.5 | — | Jul 27, 2026 | Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions. |
| CVE-2026-66428 | MEDIUM | 4.3 | — | Jul 27, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider <= 18.4 versions. |
| CVE-2026-66427 | HIGH | 7.6 | — | Jul 27, 2026 | Administrator SQL Injection in WP Google Review Slider <= 18.4 versions. |
| CVE-2026-66050 | HIGH | 8.7 | 0.7% | Jul 27, 2026 | NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows una... |
| CVE-2026-65568 | MEDIUM | 5 | — | Jul 27, 2026 | Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions. |
| CVE-2026-65567 | MEDIUM | 5.3 | — | Jul 27, 2026 | Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions. |
| CVE-2026-65564 | MEDIUM | 5.3 | — | Jul 27, 2026 | Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now