2026 CVE Vulnerabilities
56,195 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-65016 | HIGH | 8.8 | 0.3% | Jul 22, 2026 | n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation vulnerability in Enterprise SSO instance... |
| CVE-2026-65015 | HIGH | 8.8 | 0.3% | Jul 22, 2026 | n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-executio... |
| CVE-2026-65014 | MEDIUM | 5.3 | 0.3% | Jul 22, 2026 | n8n before 2.28.0 (and before 2.27.4 on the 2.27.x branch) registers the DELETE /${restEndpoint}/test-webhook/:id endpoi... |
| CVE-2026-61392 | MEDIUM | 5.3 | — | Jul 22, 2026 | There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain ... |
| CVE-2026-61391 | HIGH | 7.2 | — | Jul 22, 2026 | There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers ... |
| CVE-2026-61390 | HIGH | 7.7 | — | Jul 22, 2026 | There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to ca... |
| CVE-2026-57600 | HIGH | 7.5 | — | Jul 22, 2026 | Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers t... |
| CVE-2026-57599 | MEDIUM | 6.6 | — | Jul 22, 2026 | There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the d... |
| CVE-2026-4773 | HIGH | 8.1 | — | Jul 22, 2026 | Improper validation of specified type of input vulnerability in Magarsus Consulting Ltd. Co. IDM-MFA allows Authenticati... |
| CVE-2026-44192 | MEDIUM | 6.6 | — | Jul 22, 2026 | A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traver... |
| CVE-2026-44190 | HIGH | 7.8 | 0.8% | Jul 22, 2026 | A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) a... |
| CVE-2026-44189 | HIGH | 7.8 | — | Jul 22, 2026 | A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider. This command injec... |
| CVE-2026-44187 | LOW | 3.3 | — | Jul 22, 2026 | A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with ... |
| CVE-2026-16551 | MEDIUM | 6.9 | 0.4% | Jul 22, 2026 | Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation. This issue affe... |
| CVE-2026-16544 | MEDIUM | 6.5 | — | Jul 22, 2026 | A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for event groups that are ... |
| CVE-2026-16473 | MEDIUM | 4.3 | 0.2% | Jul 22, 2026 | A flaw was found in the sbc library (BlueZ SBC codec). An off-by-one error in the SBC frame decoder allows a crafted aud... |
| CVE-2026-14551 | HIGH | 8.8 | — | Jul 22, 2026 | The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20.15 and earlier are v... |
| CVE-2026-63264 | MEDIUM | 5.3 | 0.3% | Jul 22, 2026 | Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3 - The Joomla extension JoomShopping is vuln... |
| CVE-2026-2406 | MEDIUM | 6.5 | 0.3% | Jul 22, 2026 | Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industr... |
| CVE-2026-15787 | MEDIUM | 6.4 | 0.2% | Jul 22, 2026 | The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu ... |
| CVE-2026-63048 | CRITICAL | 9.4 | 0.4% | Jul 22, 2026 | Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The... |
| CVE-2026-63047 | HIGH | 7.5 | 0.2% | Jul 22, 2026 | Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - ... |
| CVE-2026-45820 | HIGH | 7.5 | 0.3% | Jul 22, 2026 | fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with ... |
| CVE-2026-3821 | HIGH | 8.8 | 0.6% | Jul 22, 2026 | Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attack... |
| CVE-2026-14322 | MEDIUM | 5.3 | 0.1% | Jul 22, 2026 | The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created throug... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now