2026 CVE Vulnerabilities
43,288 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-66748 | HIGH | 8.8 | 0.8% | Jul 28, 2026 | Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows user... |
| CVE-2026-61609 | HIGH | 7.5 | 0.4% | Jul 28, 2026 | Pterodactyl is a free, open-source game server management panel. From 1.7.0 until 1.13.0, the authentication rate limite... |
| CVE-2026-54593 | HIGH | 8.1 | 0.4% | Jul 28, 2026 | Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2,... |
| CVE-2026-54545 | HIGH | 7.1 | 0.1% | Jul 28, 2026 | wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sanitizes bundle-controlle... |
| CVE-2026-47483 | HIGH | 8.2 | — | Jul 28, 2026 | NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could c... |
| CVE-2026-47427 | HIGH | 7.5 | 0.4% | Jul 28, 2026 | GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.... |
| CVE-2026-45293 | HIGH | 8.6 | — | Jul 28, 2026 | WordPress Coding Standards is a set of PHP_CodeSniffer rules (sniffs) that enforce WordPress coding conventions. From 0.... |
| CVE-2026-43910 | HIGH | 8.2 | 0.2% | Jul 28, 2026 | Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. Fro... |
| CVE-2026-8164 | HIGH | 7.3 | — | Jul 28, 2026 | Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desk... |
| CVE-2026-67178 | HIGH | 7.8 | 0.5% | Jul 28, 2026 | MISP installation scripts generated an Apache HTTP virtual-host configuration containing an incorrectly formatted HTTP-t... |
| CVE-2026-66299 | HIGH | 7.5 | 0.3% | Jul 28, 2026 | Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache To... |
| CVE-2026-63727 | HIGH | 8.8 | — | Jul 28, 2026 | Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in th... |
| CVE-2026-59878 | HIGH | 7.5 | 0.5% | Jul 28, 2026 | Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthe... |
| CVE-2026-7187 | HIGH | 8.8 | 0.2% | Jul 28, 2026 | Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionalit... |
| CVE-2026-66920 | HIGH | 8.2 | 0.3% | Jul 28, 2026 | Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affec... |
| CVE-2026-66918 | HIGH | 8.2 | 0.3% | Jul 28, 2026 | Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node style.svgIcon property before in... |
| CVE-2026-65881 | HIGH | 7.5 | — | Jul 28, 2026 | Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1... |
| CVE-2026-62433 | HIGH | 7.3 | — | Jul 28, 2026 | Parts of the DM_OP handling code assumes the caller has provided the required number of buffers for the given operation ... |
| CVE-2026-62432 | HIGH | 7.3 | — | Jul 28, 2026 | The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct ... |
| CVE-2026-62431 | HIGH | 7.5 | — | Jul 28, 2026 | The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that ... |
| CVE-2026-62430 | HIGH | 7.5 | — | Jul 28, 2026 | Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest ch... |
| CVE-2026-62428 | HIGH | 7.8 | — | Jul 28, 2026 | When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a ... |
| CVE-2026-62427 | HIGH | 8.8 | — | Jul 28, 2026 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi... |
| CVE-2026-62426 | HIGH | 8.8 | — | Jul 28, 2026 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi... |
| CVE-2026-49332 | HIGH | 8.5 | 0.2% | Jul 28, 2026 | A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys (X... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now