2026 CVE Vulnerabilities
43,277 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-67301 | HIGH | 8.7 | 0.3% | Aug 1, 2026 | FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC an... |
| CVE-2026-67300 | HIGH | 8.7 | 0.3% | Aug 1, 2026 | FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAI... |
| CVE-2026-67299 | HIGH | 8.7 | 0.3% | Aug 1, 2026 | FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER... |
| CVE-2026-67298 | HIGH | 8.7 | 0.4% | Aug 1, 2026 | FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler (rail_server_... |
| CVE-2026-67297 | HIGH | 8.7 | 0.3% | Aug 1, 2026 | FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses... |
| CVE-2026-67296 | HIGH | 8.7 | 0.3% | Aug 1, 2026 | FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to valid... |
| CVE-2026-67291 | HIGH | 8.7 | 0.3% | Aug 1, 2026 | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in update_process_glyph_fragments... |
| CVE-2026-67290 | HIGH | 8.7 | 0.4% | Aug 1, 2026 | FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG... |
| CVE-2026-67288 | HIGH | 8.7 | 0.4% | Aug 1, 2026 | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept ... |
| CVE-2026-18536 | HIGH | 7.5 | 0.2% | Aug 1, 2026 | Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource:... |
| CVE-2026-16635 | HIGH | 8.8 | 0.3% | Aug 1, 2026 | The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0... |
| CVE-2026-16144 | HIGH | 8.1 | 0.7% | Aug 1, 2026 | The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all... |
| CVE-2026-15450 | HIGH | 8.1 | 0.4% | Aug 1, 2026 | The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path trav... |
| CVE-2026-15052 | HIGH | 7.2 | 0.2% | Aug 1, 2026 | The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2026-15988 | HIGH | 8.8 | 0.2% | Aug 1, 2026 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request F... |
| CVE-2026-15368 | HIGH | 8.1 | 0.1% | Aug 1, 2026 | The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after use... |
| CVE-2026-15244 | HIGH | 7.2 | 0.5% | Aug 1, 2026 | The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before con... |
| CVE-2026-14839 | HIGH | 7.5 | 0.1% | Aug 1, 2026 | The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public R... |
| CVE-2026-14836 | HIGH | 8.1 | 0.1% | Aug 1, 2026 | The Login & Register Forms WordPress plugin before 3.2.5 does not properly enforce the rate limit on its password-reset... |
| CVE-2026-14596 | HIGH | 8.8 | 0.1% | Aug 1, 2026 | The DynamicKit for Elementor WordPress plugin before 1.0.3 does not validate the host of a user-supplied URL used as the... |
| CVE-2026-14309 | HIGH | 8.1 | 0.1% | Aug 1, 2026 | The Chat On Desk Order Notifications WordPress plugin before 1.0.9 does not verify that the one-time password has been ... |
| CVE-2026-13725 | HIGH | 7.1 | 0.2% | Aug 1, 2026 | The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user ... |
| CVE-2026-13158 | HIGH | 7.2 | 0.1% | Aug 1, 2026 | The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content impo... |
| CVE-2026-13157 | HIGH | 7.2 | 0.1% | Aug 1, 2026 | The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import ... |
| CVE-2026-15414 | HIGH | 8.8 | 0.3% | Aug 1, 2026 | The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and incl... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now