2026 CVE Vulnerabilities
64,785 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-8255 | LOW | 2.4 | 0.2% | May 11, 2026 | A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventor... |
| CVE-2026-8254 | LOW | 2.4 | 0.3% | May 11, 2026 | A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functi... |
| CVE-2026-8253 | LOW | 2.4 | 0.2% | May 11, 2026 | A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown funct... |
| CVE-2026-8242 | LOW | 3.7 | 0.3% | May 10, 2026 | A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted element is the function d... |
| CVE-2026-8221 | LOW | 2.4 | 0.2% | May 10, 2026 | A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/ite... |
| CVE-2026-8220 | LOW | 2.4 | 0.2% | May 10, 2026 | A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /invent... |
| CVE-2026-8219 | LOW | 2.4 | 0.3% | May 10, 2026 | A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown fun... |
| CVE-2026-8218 | LOW | 2.4 | 0.2% | May 10, 2026 | A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affected element is an unknown function of the... |
| CVE-2026-45182 | LOW | 2.2 | 0.1% | May 9, 2026 | GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN user as a consequence of a regist... |
| CVE-2026-8196 | LOW | 3.7 | 0.5% | May 9, 2026 | A flaw has been found in JeecgBoot 3.9.1. The impacted element is an unknown function of the file jeecg-module-system/je... |
| CVE-2026-44987 | LOW | 3.8 | 0.2% | May 8, 2026 | SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users with "User Admin" permissi... |
| CVE-2026-44286 | LOW | 2.3 | 0.2% | May 8, 2026 | FastGPT is an AI Agent building platform. Prior to version 4.14.17, an unauthenticated Server-Side Request Forgery (SSRF... |
| CVE-2026-42195 | LOW | 3.4 | 0.2% | May 8, 2026 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.9, the draw.io client accepts... |
| CVE-2026-32803 | LOW | 3.3 | 0.1% | May 8, 2026 | Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 ... |
| CVE-2026-44916 | LOW | 3 | 0.3% | May 8, 2026 | In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered wit... |
| CVE-2026-8136 | LOW | 2.4 | 0.2% | May 8, 2026 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the fil... |
| CVE-2026-41498 | LOW | 3.3 | 0.2% | May 8, 2026 | Kimai is an open-source time tracking application. Prior to version 2.54.0, the Team API endpoints use #[IsGranted('edit... |
| CVE-2026-6737 | LOW | 2 | 0.1% | May 8, 2026 | An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user to bypass driver se... |
| CVE-2026-41663 | LOW | 3.5 | 0.1% | May 7, 2026 | Admidio is an open-source user management solution. Prior to version 5.0.9, several administrative operations in Admidio... |
| CVE-2026-41659 | LOW | 2.7 | 0.3% | May 7, 2026 | Admidio is an open-source user management solution. Prior to version 5.0.9, the member assignment DataTables endpoint (m... |
| CVE-2026-8022 | LOW | 3.1 | 0.2% | May 6, 2026 | Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a ... |
| CVE-2026-8017 | LOW | 3.1 | 0.1% | May 6, 2026 | Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cros... |
| CVE-2026-7968 | LOW | 3.1 | 0.2% | May 6, 2026 | Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who... |
| CVE-2026-7966 | LOW | 3.1 | 0.2% | May 6, 2026 | Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote att... |
| CVE-2026-7965 | LOW | 3.1 | 0.2% | May 6, 2026 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now