2026 CVE Vulnerabilities
55,803 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-52439 | CRITICAL | 9.8 | 0.5% | Jul 23, 2026 | An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the p... |
| CVE-2026-50103 | HIGH | 7.1 | 0.2% | Jul 23, 2026 | A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to cra... |
| CVE-2026-50039 | HIGH | 8.7 | 0.3% | Jul 23, 2026 | The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corru... |
| CVE-2026-50032 | HIGH | 8.7 | 0.3% | Jul 23, 2026 | A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to ... |
| CVE-2026-49035 | CRITICAL | 9.2 | 0.4% | Jul 23, 2026 | The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execu... |
| CVE-2026-47724 | CRITICAL | 9.9 | 0.4% | Jul 23, 2026 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the `/... |
| CVE-2026-47723 | HIGH | 7.1 | 0.3% | Jul 23, 2026 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.1, none o... |
| CVE-2026-39155 | MEDIUM | 6.5 | 0.1% | Jul 23, 2026 | Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name ... |
| CVE-2026-38764 | HIGH | 7.8 | 0.2% | Jul 23, 2026 | An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kerne... |
| CVE-2026-34496 | HIGH | 7.1 | 0.2% | Jul 23, 2026 | Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before... |
| CVE-2026-21655 | HIGH | 8.7 | 0.2% | Jul 23, 2026 | Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and J... |
| CVE-2026-21653 | HIGH | 7.2 | 0.2% | Jul 23, 2026 | Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forger... |
| CVE-2026-16796 | HIGH | 8.4 | 0.3% | Jul 23, 2026 | Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK befo... |
| CVE-2026-16002 | HIGH | 8.8 | 0.3% | Jul 23, 2026 | The affected product is vulnerable to an Out-of-bounds read, which may allow an attacker to crash the parsing process an... |
| CVE-2026-15981 | CRITICAL | 9.8 | 0.5% | Jul 23, 2026 | The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, a... |
| CVE-2026-15968 | MEDIUM | 5.4 | 0.2% | Jul 23, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Tr... |
| CVE-2026-15967 | CRITICAL | 9.8 | 0.2% | Jul 23, 2026 | Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2... |
| CVE-2026-15966 | CRITICAL | 9.8 | 0.2% | Jul 23, 2026 | Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue af... |
| CVE-2026-15630 | CRITICAL | 9.9 | 0.2% | Jul 23, 2026 | A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any... |
| CVE-2026-10697 | CRITICAL | 9.8 | 0.2% | Jul 23, 2026 | Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5,... |
| CVE-2026-65706 | HIGH | 8.5 | 0.1% | Jul 23, 2026 | FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allo... |
| CVE-2026-65705 | HIGH | 7.8 | 0.1% | Jul 23, 2026 | FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that all... |
| CVE-2026-65704 | HIGH | 7.8 | 0.1% | Jul 23, 2026 | FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by sup... |
| CVE-2026-65703 | HIGH | 8.5 | 0.2% | Jul 23, 2026 | FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows rem... |
| CVE-2026-64785 | MEDIUM | 5.3 | 0.2% | Jul 23, 2026 | SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters r... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now