2026 CVE Vulnerabilities
43,031 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-64954 | HIGH | 8.2 | — | Aug 12, 2026 | Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, th... |
| CVE-2026-12235 | MEDIUM | 6.3 | — | Aug 12, 2026 | The Linkable Loadable Extensions (llext) subsystem mis-handles PLT/RELA relocation entries when linking a relocatable (p... |
| CVE-2026-12234 | HIGH | 7.8 | — | Aug 12, 2026 | The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/sockets/sockets.c sn... |
| CVE-2026-12233 | MEDIUM | 5.9 | — | Aug 12, 2026 | The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credentials_trusted.c) declared its cre... |
| CVE-2026-12232 | MEDIUM | 6.1 | — | Aug 12, 2026 | The Intel ALH digital-audio-interface driver function dai_alh_get_properties() in drivers/dai/intel/alh/alh.c used a cal... |
| CVE-2026-9318 | MEDIUM | 5.4 | — | Aug 12, 2026 | tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows... |
| CVE-2026-19588 | MEDIUM | 6.5 | — | Aug 12, 2026 | Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. |
| CVE-2026-19587 | MEDIUM | 6.5 | — | Aug 12, 2026 | Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation. |
| CVE-2026-18961 | HIGH | 8.1 | — | Aug 12, 2026 | The Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect plugin for WordPress is vulnera... |
| CVE-2026-73122 | HIGH | 7.7 | — | Aug 12, 2026 | A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vuln... |
| CVE-2026-72526 | CRITICAL | 9.9 | — | Aug 12, 2026 | A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-man... |
| CVE-2026-70398 | CRITICAL | 9.6 | — | Aug 12, 2026 | A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerabil... |
| CVE-2026-66878 | HIGH | 7.7 | — | Aug 12, 2026 | A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable... |
| CVE-2026-64927 | MEDIUM | 6.4 | — | Aug 12, 2026 | A flaw was found in the multicloud-operators-channel component. This vulnerability allows a user with specific permissio... |
| CVE-2026-6484 | HIGH | 8.2 | — | Aug 12, 2026 | In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution. |
| CVE-2026-68450 | — | — | — | Aug 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root in... |
| CVE-2026-68449 | — | — | — | Aug 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: fix infinite loop in NCQ tag c... |
| CVE-2026-68448 | — | — | — | Aug 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copy_file_range source with sr... |
| CVE-2026-68447 | — | — | — | Aug 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint ... |
| CVE-2026-68446 | — | — | — | Aug 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_si... |
| CVE-2026-68445 | — | — | — | Aug 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming w... |
| CVE-2026-68444 | — | — | — | Aug 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix NULL dereference in ffa_part... |
| CVE-2026-68443 | — | — | — | Aug 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (gigabyte_waterforce) Stop device IO before ... |
| CVE-2026-68442 | — | — | — | Aug 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to split... |
| CVE-2026-68441 | — | — | — | Aug 12, 2026 | In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qdisc filter... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now