2026 CVE Vulnerabilities
53,578 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23721 | MEDIUM | 4.3 | 0.2% | Jan 19, 2026 | OpenProject is an open-source, web-based project management software. When using groups in OpenProject to manage users, ... |
| CVE-2026-23646 | MEDIUM | 6.5 | 0.3% | Jan 19, 2026 | OpenProject is an open-source, web-based project management software. Users of OpenProject versions prior to 16.6.5 and ... |
| CVE-2026-23625 | MEDIUM | 5.4 | 0.2% | Jan 19, 2026 | OpenProject is an open-source, web-based project management software. Versions 16.3.0 through 16.6.4 are affected by a s... |
| CVE-2026-1170 | MEDIUM | 5.5 | 0.4% | Jan 19, 2026 | A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file ... |
| CVE-2026-21618 | MEDIUM | 6.1 | 0.2% | Jan 19, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in hexpm hexpm... |
| CVE-2026-1154 | MEDIUM | 5.4 | 0.3% | Jan 19, 2026 | A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modul... |
| CVE-2026-1153 | MEDIUM | 4.3 | 0.2% | Jan 19, 2026 | A vulnerability was detected in technical-laohu mpay up to 1.2.4. This affects an unknown function. Performing a manipul... |
| CVE-2026-1151 | MEDIUM | 5.4 | 0.2% | Jan 19, 2026 | A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the c... |
| CVE-2026-1148 | MEDIUM | 6.5 | 0.2% | Jan 19, 2026 | A vulnerability was determined in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This v... |
| CVE-2026-1147 | MEDIUM | 5.4 | 0.2% | Jan 19, 2026 | A vulnerability was found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. This affect... |
| CVE-2026-1146 | MEDIUM | 5.4 | 0.2% | Jan 19, 2026 | A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affect... |
| CVE-2026-1142 | MEDIUM | 6.5 | 0.2% | Jan 19, 2026 | A security flaw has been discovered in PHPGurukul News Portal 1.0. The impacted element is an unknown function. Performi... |
| CVE-2026-1135 | MEDIUM | 6.1 | 0.3% | Jan 19, 2026 | A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of t... |
| CVE-2026-1134 | MEDIUM | 6.1 | 0.3% | Jan 19, 2026 | A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown function of the fi... |
| CVE-2026-23829 | MEDIUM | 5.3 | 1.4% | Jan 19, 2026 | Mailpit is an email testing tool and API for developers. Prior to version 1.28.3, Mailpit's SMTP server is vulnerable to... |
| CVE-2026-23733 | MEDIUM | 6.4 | 0.1% | Jan 18, 2026 | LobeChat is an open source chat application platform. Prior to version 2.0.0-next.180, a stored Cross-Site Scripting (XS... |
| CVE-2026-23626 | MEDIUM | 6.8 | 0.4% | Jan 18, 2026 | Kimai is a web-based multi-user time-tracking application. Prior to version 2.46.0, Kimai's export functionality uses a ... |
| CVE-2026-1126 | MEDIUM | 6.3 | 0.2% | Jan 18, 2026 | A security vulnerability has been detected in lwj flow up to a3d2fe8133db9d3b50fda4f66f68634640344641. This affects the ... |
| CVE-2026-1106 | MEDIUM | 5.4 | 0.4% | Jan 18, 2026 | A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of th... |
| CVE-2026-1064 | MEDIUM | 4.7 | 4.2% | Jan 17, 2026 | A vulnerability was found in bastillion-io Bastillion up to 4.0.1. This issue affects some unknown processing of the fil... |
| CVE-2026-1063 | MEDIUM | 4.7 | 4.2% | Jan 17, 2026 | A vulnerability has been found in bastillion-io Bastillion up to 4.0.1. This vulnerability affects unknown code of the f... |
| CVE-2026-1049 | MEDIUM | 5.4 | 0.2% | Jan 17, 2026 | A security vulnerability has been detected in LigeroSmart up to 6.1.26. The affected element is an unknown function of t... |
| CVE-2026-1048 | MEDIUM | 5.4 | 0.3% | Jan 17, 2026 | A weakness has been identified in LigeroSmart up to 6.1.26. Impacted is an unknown function of the file /otrs/index.pl?A... |
| CVE-2026-0725 | MEDIUM | 4.4 | 0.2% | Jan 17, 2026 | The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in a... |
| CVE-2026-0833 | MEDIUM | 6.4 | 0.2% | Jan 17, 2026 | The Team Section Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block in all v... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now