2026 CVE Vulnerabilities
54,936 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-3873 | HIGH | 7.2 | 0.2% | Mar 13, 2026 | Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs.... |
| CVE-2026-3045 | HIGH | 7.5 | 0.3% | Mar 13, 2026 | The Appointment Booking Calendar — Simply Schedule Appointments plugin for WordPress is vulnerable to unauthorized acces... |
| CVE-2026-32597 | HIGH | 7.5 | 0.3% | Mar 13, 2026 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header ... |
| CVE-2026-32459 | HIGH | 7.6 | 0.2% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in flycart UpsellWP c... |
| CVE-2026-32458 | HIGH | 7.6 | 0.2% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 WOLF bu... |
| CVE-2026-32433 | HIGH | 8.5 | 0.2% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople CP Cont... |
| CVE-2026-32426 | HIGH | 7.5 | 0.4% | Mar 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32422 | HIGH | 8.5 | 0.2% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in levelfourdevelopme... |
| CVE-2026-32418 | HIGH | 7.6 | 0.3% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jordy Meow Meow Ga... |
| CVE-2026-32414 | HIGH | 7.2 | 0.4% | Mar 13, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in ILLID Advanced Woo Labels advanced-woo-labels... |
| CVE-2026-32401 | HIGH | 7.2 | 0.4% | Mar 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32400 | HIGH | 7.5 | 0.4% | Mar 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32399 | HIGH | 8.5 | 0.2% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Medi... |
| CVE-2026-32393 | HIGH | 7.5 | 0.4% | Mar 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32392 | HIGH | 7.5 | 0.4% | Mar 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32384 | HIGH | 7.5 | 0.4% | Mar 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32369 | HIGH | 7.5 | 0.4% | Mar 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32368 | HIGH | 8.5 | 0.2% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in delphiknight Geo t... |
| CVE-2026-32366 | HIGH | 8.5 | 0.2% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsin... |
| CVE-2026-32365 | HIGH | 8.5 | 0.3% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsin... |
| CVE-2026-32364 | HIGH | 7.5 | 0.4% | Mar 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32358 | HIGH | 7.6 | 0.3% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevelop Booking ... |
| CVE-2026-32355 | HIGH | 8.8 | 0.4% | Mar 13, 2026 | Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue af... |
| CVE-2026-32320 | HIGH | 7.5 | 0.2% | Mar 13, 2026 | Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a PathSwitchReque... |
| CVE-2026-32319 | HIGH | 7.5 | 0.3% | Mar 13, 2026 | Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now