2026 CVE Vulnerabilities
43,284 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-65635 | HIGH | 8.3 | — | Jul 30, 2026 | Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid module) allows attack... |
| CVE-2026-41186 | HIGH | 7.5 | 0.2% | Jul 30, 2026 | When Calico's shared debug server is enabled (disabled by default), the Calico kube-controllers and Goldmane components ... |
| CVE-2026-16308 | HIGH | 7.5 | — | Jul 30, 2026 | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remo... |
| CVE-2026-14980 | HIGH | 8.8 | 0.2% | Jul 30, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which c... |
| CVE-2026-14519 | HIGH | 7.5 | 0.6% | Jul 30, 2026 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to r... |
| CVE-2026-12947 | HIGH | 7.5 | — | Jul 30, 2026 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive infor... |
| CVE-2026-11980 | HIGH | 7.3 | 0.2% | Jul 30, 2026 | IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up. |
| CVE-2026-11897 | HIGH | 7.5 | 0.3% | Jul 30, 2026 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sen... |
| CVE-2026-67351 | HIGH | 8.8 | 0.4% | Jul 30, 2026 | Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and sessio... |
| CVE-2026-60075 | HIGH | 7.5 | 0.2% | Jul 30, 2026 | Date::Manip versions through 6.99 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substi... |
| CVE-2026-60074 | HIGH | 7.5 | 0.2% | Jul 30, 2026 | Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric ran... |
| CVE-2026-5219 | HIGH | 8.3 | — | Jul 30, 2026 | Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows C... |
| CVE-2026-57859 | HIGH | 7.7 | — | Jul 30, 2026 | e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that allows a... |
| CVE-2026-56428 | HIGH | 8.1 | — | Jul 30, 2026 | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly... |
| CVE-2026-12722 | HIGH | 8.2 | — | Jul 30, 2026 | Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel a... |
| CVE-2026-54368 | HIGH | 8.8 | — | Jul 30, 2026 | CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows... |
| CVE-2026-54367 | HIGH | 8.8 | — | Jul 30, 2026 | CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, w... |
| CVE-2026-54366 | HIGH | 8.7 | — | Jul 30, 2026 | CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthenticated attack... |
| CVE-2026-54365 | HIGH | 8.7 | 0.2% | Jul 30, 2026 | CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthe... |
| CVE-2026-41703 | HIGH | 7.6 | — | Jul 30, 2026 | VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment pr... |
| CVE-2026-18381 | HIGH | 7.6 | 0.2% | Jul 30, 2026 | A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom r... |
| CVE-2026-18378 | HIGH | 7.6 | 0.2% | Jul 30, 2026 | A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able t... |
| CVE-2026-15397 | HIGH | 7.2 | — | Jul 30, 2026 | The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and... |
| CVE-2026-22622 | HIGH | 8.8 | — | Jul 30, 2026 | Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could al... |
| CVE-2026-22621 | HIGH | 8.3 | — | Jul 30, 2026 | Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could al... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now