2026 CVE Vulnerabilities
55,130 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-32369 | HIGH | 7.5 | 0.4% | Mar 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32368 | HIGH | 8.5 | 0.2% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in delphiknight Geo t... |
| CVE-2026-32366 | HIGH | 8.5 | 0.2% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsin... |
| CVE-2026-32365 | HIGH | 8.5 | 0.3% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robfelty Collapsin... |
| CVE-2026-32364 | HIGH | 7.5 | 0.4% | Mar 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32358 | HIGH | 7.6 | 0.3% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevelop Booking ... |
| CVE-2026-32355 | HIGH | 8.8 | 0.4% | Mar 13, 2026 | Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue af... |
| CVE-2026-32320 | HIGH | 7.5 | 0.2% | Mar 13, 2026 | Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a PathSwitchReque... |
| CVE-2026-32319 | HIGH | 7.5 | 0.3% | Mar 13, 2026 | Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integ... |
| CVE-2026-32308 | HIGH | 7.6 | 0.2% | Mar 13, 2026 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the Markdown viewer component ren... |
| CVE-2026-32302 | HIGH | 8.1 | 0.2% | Mar 13, 2026 | OpenClaw is a personal AI assistant. Prior to 2026.3.11, browser-originated WebSocket connections could bypass origin va... |
| CVE-2026-31944 | HIGH | 7.6 | 0.2% | Mar 13, 2026 | LibreChat is a ChatGPT clone with additional features. From 0.8.2 to 0.8.2-rc3, The MCP (Model Context Protocol) OAuth c... |
| CVE-2026-31922 | HIGH | 8.5 | 0.2% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Fox LMS fo... |
| CVE-2026-31917 | HIGH | 8.5 | 0.3% | Mar 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP erp ... |
| CVE-2026-31899 | HIGH | 7.5 | 0.5% | Mar 13, 2026 | CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of se... |
| CVE-2026-31886 | HIGH | 7.6 | 0.4% | Mar 13, 2026 | Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, the dagRunId request field accepted by the... |
| CVE-2026-31884 | HIGH | 7.5 | 0.3% | Mar 13, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, division by zero in MS-ADPCM and IMA-A... |
| CVE-2026-31882 | HIGH | 7.5 | 0.8% | Mar 13, 2026 | Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, when Dagu is configured with HTTP Basic au... |
| CVE-2026-31814 | HIGH | 7.5 | 0.5% | Mar 13, 2026 | Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP. From 0.13.0 to before 0.13.9, a special... |
| CVE-2026-30914 | HIGH | 8.1 | 0.5% | Mar 13, 2026 | SFTPGo is an open source, event-driven file transfer solution. In SFTPGo versions prior to 2.7.1, a path normalization d... |
| CVE-2026-30853 | HIGH | 8.2 | 0.2% | Mar 13, 2026 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to 9.5.0, a p... |
| CVE-2026-2890 | HIGH | 7.5 | 0.3% | Mar 13, 2026 | The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and includi... |
| CVE-2026-29775 | HIGH | 8.2 | 0.3% | Mar 13, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap out-of-bounds read/... |
| CVE-2026-29774 | HIGH | 8.2 | 0.3% | Mar 13, 2026 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occ... |
| CVE-2026-29079 | HIGH | 7.5 | 0.3% | Mar 13, 2026 | Lexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion vulnerability exists in Lexbor’s HTML fragment ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now