2026 CVE Vulnerabilities
53,578 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16232 | CRITICAL | 9.8 | 71.4% | Jul 22, 2026 | An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote at... |
| CVE-2026-14932 | MEDIUM | 6.5 | 0.2% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vuln... |
| CVE-2026-14865 | MEDIUM | 5.3 | 0.2% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML wi... |
| CVE-2026-14586 | MEDIUM | 5.9 | — | Jul 22, 2026 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under ... |
| CVE-2026-13192 | MEDIUM | 6.5 | 0.2% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PD... |
| CVE-2026-13190 | HIGH | 8.1 | 0.5% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities all... |
| CVE-2026-13189 | HIGH | 7.5 | 0.3% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in the spell c... |
| CVE-2026-13188 | MEDIUM | 5.9 | 0.1% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler request parameters may be tampered with, potential... |
| CVE-2026-13187 | HIGH | 8.1 | 0.3% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler provider type input may be tampered with, potentia... |
| CVE-2026-13186 | HIGH | 8.1 | 0.5% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence sto... |
| CVE-2026-13185 | HIGH | 8.1 | 0.5% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager... |
| CVE-2026-13184 | HIGH | 7.5 | 0.2% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKe... |
| CVE-2026-13183 | HIGH | 7.5 | 0.3% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptographic... |
| CVE-2026-13182 | HIGH | 7.5 | 0.3% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt f... |
| CVE-2026-13181 | HIGH | 8.1 | 0.5% | Jul 22, 2026 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName process... |
| CVE-2026-8152 | CRITICAL | 9.3 | — | Jul 22, 2026 | Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting (XSS) atta... |
| CVE-2026-44191 | HIGH | 7.8 | — | Jul 22, 2026 | A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability (CWE-78) a... |
| CVE-2026-16270 | MEDIUM | 6.9 | — | Jul 22, 2026 | Open Mercato does not validate regex rules. An attacker with privileges to create the regex rule can add an unsafe regex... |
| CVE-2026-65603 | HIGH | 8.8 | — | Jul 22, 2026 | The Grav Login plugin (grav-plugin-login) versions <= 3.8.11 contain a privilege escalation flaw in the authenticated pr... |
| CVE-2026-65602 | HIGH | 8.8 | 0.2% | Jul 22, 2026 | Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRo... |
| CVE-2026-65601 | MEDIUM | 5.3 | 0.4% | Jul 22, 2026 | Traefik versions 3.7.0 through 3.7.6 contain a namespace confusion vulnerability in the Kubernetes Gateway API provider.... |
| CVE-2026-65600 | MEDIUM | 5.3 | 0.7% | Jul 22, 2026 | Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path tr... |
| CVE-2026-65599 | MEDIUM | 6.5 | 0.2% | Jul 22, 2026 | n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Goo... |
| CVE-2026-65598 | HIGH | 7.5 | 0.2% | Jul 22, 2026 | n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allows a... |
| CVE-2026-65597 | MEDIUM | 5.4 | 0.4% | Jul 22, 2026 | n8n before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contains a DOM-based cross-site scripting vulnerability in the... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now