2026 CVE Vulnerabilities
55,483 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-23668 | HIGH | 7 | 3.6% | Mar 10, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Compon... |
| CVE-2026-23667 | HIGH | 7 | 0.3% | Mar 10, 2026 | Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally. |
| CVE-2026-23665 | HIGH | 7.8 | 0.4% | Mar 10, 2026 | Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally. |
| CVE-2026-23664 | HIGH | 7.5 | 1.0% | Mar 10, 2026 | Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacke... |
| CVE-2026-23662 | HIGH | 7.5 | 0.7% | Mar 10, 2026 | Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose informati... |
| CVE-2026-23661 | HIGH | 7.5 | 0.7% | Mar 10, 2026 | Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose inform... |
| CVE-2026-23660 | HIGH | 7.8 | 0.3% | Mar 10, 2026 | Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally... |
| CVE-2026-23654 | HIGH | 8.8 | 0.9% | Mar 10, 2026 | Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to... |
| CVE-2026-23239 | HIGH | 7.8 | 0.1% | Mar 10, 2026 | In the Linux kernel, the following vulnerability has been resolved: espintcp: Fix race condition in espintcp_close() T... |
| CVE-2026-22627 | HIGH | 8.8 | 0.3% | Mar 10, 2026 | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.... |
| CVE-2026-22572 | HIGH | 7.2 | 0.6% | Mar 10, 2026 | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3,... |
| CVE-2026-21262 | HIGH | 8.8 | 2.0% | Mar 10, 2026 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-20967 | HIGH | 8.8 | 1.1% | Mar 10, 2026 | Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a... |
| CVE-2026-1261 | HIGH | 7.2 | 0.3% | Mar 10, 2026 | The MetForm Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Quiz feature in all versions u... |
| CVE-2026-3585 | HIGH | 7.5 | 0.4% | Mar 10, 2026 | The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.... |
| CVE-2026-30925 | HIGH | 7.5 | 0.4% | Mar 10, 2026 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.0-a... |
| CVE-2026-30920 | HIGH | 8.6 | 0.2% | Mar 10, 2026 | OneUptime is a solution for monitoring and managing online services. Prior to 10.0.19, OneUptime's GitHub App callback t... |
| CVE-2026-30917 | HIGH | 8.8 | 0.3% | Mar 10, 2026 | Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be i... |
| CVE-2026-2364 | HIGH | 7.3 | 0.1% | Mar 10, 2026 | If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low pr... |
| CVE-2026-28513 | HIGH | 7.1 | 0.3% | Mar 10, 2026 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, th... |
| CVE-2026-28281 | HIGH | 7.1 | 0.1% | Mar 10, 2026 | InstantCMS is a free and open source content management system. Prior to 2.18.1, InstantCMS does not validate CSRF token... |
| CVE-2026-27689 | HIGH | 7.7 | 0.4% | Mar 10, 2026 | Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular us... |
| CVE-2026-30931 | HIGH | 7.8 | 0.1% | Mar 10, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1... |
| CVE-2026-30929 | HIGH | 7.8 | 0.1% | Mar 10, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1... |
| CVE-2026-30926 | HIGH | 7.1 | 0.3% | Mar 10, 2026 | SiYuan is a personal knowledge management system. Prior to 3.5.10, a privilege escalation vulnerability exists in the pu... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now