2026 CVE Vulnerabilities
55,393 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-64277 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap to the... |
| CVE-2026-64276 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the... |
| CVE-2026-64275 | MEDIUM | 5.5 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - prevent division by zero and arit... |
| CVE-2026-64274 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact c... |
| CVE-2026-64273 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-fee... |
| CVE-2026-64272 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and ... |
| CVE-2026-64271 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on every c... |
| CVE-2026-64270 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet s... |
| CVE-2026-64269 | CRITICAL | 9.1 | 0.7% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk siz... |
| CVE-2026-64268 | CRITICAL | 9.8 | 0.7% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: bound Read Response placement to the RREA... |
| CVE-2026-64267 | MEDIUM | 5.5 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap F... |
| CVE-2026-64266 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fuse_re... |
| CVE-2026-64265 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_remo... |
| CVE-2026-64264 | MEDIUM | 5.5 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobber in fuse_uring_commit... |
| CVE-2026-64263 | MEDIUM | 5.5 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to ent_in_us... |
| CVE-2026-64262 | MEDIUM | 5.5 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fuse_req on io-uring cancel task wo... |
| CVE-2026-64261 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_asyn... |
| CVE-2026-64260 | HIGH | 7.8 | 0.1% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid queue->stopped races and set/read... |
| CVE-2026-64259 | HIGH | 7.8 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only find... |
| CVE-2026-64258 | MEDIUM | 5.5 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: remove request-less entries from ent_w_... |
| CVE-2026-64257 | CRITICAL | 9.1 | 0.7% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 ... |
| CVE-2026-64256 | MEDIUM | 5.5 | 0.2% | Jul 25, 2026 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLL... |
| CVE-2026-16766 | CRITICAL | 9.8 | 1.3% | Jul 25, 2026 | Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options. ... |
| CVE-2026-15425 | MEDIUM | 6.4 | 0.2% | Jul 25, 2026 | The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-... |
| CVE-2026-14955 | MEDIUM | 6.5 | 0.5% | Jul 25, 2026 | The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to Directory Traversal in all version... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now