2026 CVE Vulnerabilities
53,212 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-34572 | HIGH | 8.8 | 0.5% | Apr 1, 2026 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati... |
| CVE-2026-34570 | HIGH | 8.8 | 0.5% | Apr 1, 2026 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati... |
| CVE-2026-34561 | HIGH | 8.4 | 0.2% | Apr 1, 2026 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati... |
| CVE-2026-34545 | HIGH | 7.3 | 0.6% | Apr 1, 2026 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the ... |
| CVE-2026-34544 | HIGH | 7.3 | 0.2% | Apr 1, 2026 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the ... |
| CVE-2026-34543 | HIGH | 7.5 | 0.5% | Apr 1, 2026 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the ... |
| CVE-2026-34531 | HIGH | 8.2 | 0.3% | Apr 1, 2026 | Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situa... |
| CVE-2026-34516 | HIGH | 7.5 | 0.4% | Apr 1, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, a response with... |
| CVE-2026-34515 | HIGH | 7.5 | 0.4% | Apr 1, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, on Windows the ... |
| CVE-2026-34513 | HIGH | 7.5 | 0.4% | Apr 1, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an unbounded DN... |
| CVE-2026-22815 | HIGH | 7.5 | 0.4% | Apr 1, 2026 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, insufficient re... |
| CVE-2026-1345 | HIGH | 7.3 | 0.4% | Apr 1, 2026 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 ... |
| CVE-2026-34748 | HIGH | 8.7 | 0.3% | Apr 1, 2026 | Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/next, a sto... |
| CVE-2026-34747 | HIGH | 8.2 | 0.3% | Apr 1, 2026 | Payload is a free and open source headless content management system. Prior to version 3.79.1, certain request inputs we... |
| CVE-2026-34746 | HIGH | 7.7 | 0.3% | Apr 1, 2026 | Payload is a free and open source headless content management system. Prior to version 3.79.1, an authenticated Server-S... |
| CVE-2026-34455 | HIGH | 8.8 | 0.4% | Apr 1, 2026 | Hi.Events is an open-source event management and ticket selling platform. From version 0.8.0-beta.1 to before version 1.... |
| CVE-2026-35000 | HIGH | 7.1 | 0.3% | Apr 1, 2026 | ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementa... |
| CVE-2026-34874 | HIGH | 7.5 | 0.3% | Apr 1, 2026 | An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distingu... |
| CVE-2026-25835 | HIGH | 7.7 | 0.2% | Apr 1, 2026 | Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG). |
| CVE-2026-25833 | HIGH | 7.5 | 0.3% | Apr 1, 2026 | Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function |
| CVE-2026-34445 | HIGH | 8.6 | 0.3% | Apr 1, 2026 | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, ... |
| CVE-2026-34397 | HIGH | 7 | 0.2% | Apr 1, 2026 | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3... |
| CVE-2026-34376 | HIGH | 7.5 | 0.4% | Apr 1, 2026 | PdfDing is a selfhosted PDF manager, viewer and editor offering a seamless user experience on multiple devices. Prior to... |
| CVE-2026-34222 | HIGH | 7.7 | 5.3% | Apr 1, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.8.... |
| CVE-2026-34076 | HIGH | 7.4 | 0.3% | Apr 1, 2026 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. In @clerk/hono from versions 0.1.0 to b... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now