2026 CVE Vulnerabilities
55,518 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-66010 | MEDIUM | 6.1 | 0.2% | Jul 24, 2026 | DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HANDL... |
| CVE-2026-66009 | MEDIUM | 6.3 | 0.3% | Jul 24, 2026 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.5 and >= 8.2.2 before 8.6.86 return GraphQL validation error messages... |
| CVE-2026-66008 | MEDIUM | 6.3 | 0.3% | Jul 24, 2026 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >= 8.2.2 before 8.6.87 disclose Pointer and Relation target cla... |
| CVE-2026-46452 | MEDIUM | 5.3 | — | Jul 24, 2026 | Improper Input Validation vulnerability in Apache NimBLE in Mesh Proxy SAR reassembly could result in passing broken dat... |
| CVE-2026-45816 | HIGH | 7.5 | — | Jul 24, 2026 | NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asser... |
| CVE-2026-45815 | HIGH | 7.5 | — | Jul 24, 2026 | Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP_... |
| CVE-2026-45813 | HIGH | 8.8 | — | Jul 24, 2026 | Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper valida... |
| CVE-2026-45812 | MEDIUM | 6.5 | — | Jul 24, 2026 | Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event.... |
| CVE-2026-45811 | HIGH | 7.5 | — | Jul 24, 2026 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. The HCI socket tr... |
| CVE-2026-16743 | MEDIUM | 5.5 | — | Jul 24, 2026 | A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root ... |
| CVE-2026-16730 | MEDIUM | 5.5 | 0.1% | Jul 24, 2026 | A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer set... |
| CVE-2026-15810 | HIGH | 8.7 | 0.3% | Jul 24, 2026 | A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.103, 25.12.65, 25.18.68, 26.0.6... |
| CVE-2026-15243 | HIGH | 7.4 | 0.2% | Jul 24, 2026 | Apereo CAS Client accepts any CA-trusted certificate for any hostname, provided the URL the client is calling matches th... |
| CVE-2026-10610 | HIGH | 8.5 | 0.1% | Jul 24, 2026 | Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user. |
| CVE-2026-7483 | HIGH | 8.5 | 0.1% | Jul 24, 2026 | Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a... |
| CVE-2026-16634 | CRITICAL | 9.8 | 0.2% | Jul 24, 2026 | TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The tomlc99 library is ... |
| CVE-2026-15663 | MEDIUM | 4.9 | 0.5% | Jul 24, 2026 | The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to generic SQL Injecti... |
| CVE-2026-15401 | HIGH | 7.2 | 0.6% | Jul 24, 2026 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vbf... |
| CVE-2026-10033 | HIGH | 7.3 | 0.3% | Jul 24, 2026 | The EventON Action User plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,... |
| CVE-2026-63317 | MEDIUM | 5.6 | 0.3% | Jul 24, 2026 | Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected:... |
| CVE-2026-56392 | LOW | 1.8 | 0.1% | Jul 24, 2026 | GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation... |
| CVE-2026-56391 | MEDIUM | 4.6 | 0.1% | Jul 24, 2026 | GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--ch... |
| CVE-2026-49745 | HIGH | 7.8 | 0.1% | Jul 24, 2026 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a writ... |
| CVE-2026-49744 | HIGH | 7.8 | 0.1% | Jul 24, 2026 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a writ... |
| CVE-2026-49743 | HIGH | 7.8 | 0.1% | Jul 24, 2026 | Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now