2026 CVE Vulnerabilities
64,732 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97884 | MEDIUM | 6.3 | — | Sep 25, 2026 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. ... |
| CVE-2026-93366 | MEDIUM | 5.4 | — | Sep 25, 2026 | Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author... |
| CVE-2026-56735 | MEDIUM | 5.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, zammad's HTML sanitizer (H... |
| CVE-2026-56734 | MEDIUM | 5.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, during federated authentication (OAu... |
| CVE-2026-56732 | MEDIUM | 5.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's HTML sanit... |
| CVE-2026-56728 | MEDIUM | 5.3 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a broken access control vulnerabilit... |
| CVE-2026-56726 | MEDIUM | 5.1 | — | Sep 25, 2026 | Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnerability breaks normal tic... |
| CVE-2026-97879 | MEDIUM | 5.3 | — | Sep 25, 2026 | A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown function ... |
| CVE-2026-95835 | MEDIUM | 5.6 | — | Sep 25, 2026 | Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other th... |
| CVE-2026-95834 | MEDIUM | 4.6 | — | Sep 25, 2026 | Use After Free in the drag source path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program... |
| CVE-2026-93365 | MEDIUM | 6.5 | — | Sep 25, 2026 | Bludit CMS through 3.22.0 contains a missing authorization vulnerability that allows authenticated users holding the Aut... |
| CVE-2026-93364 | MEDIUM | 4.3 | — | Sep 25, 2026 | Bludit CMS through 3.22.0 contains a mass assignment vulnerability that allows authenticated users with the Author role ... |
| CVE-2026-93363 | MEDIUM | 4.3 | — | Sep 25, 2026 | The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that a... |
| CVE-2026-80432 | MEDIUM | 6 | — | Sep 25, 2026 | Missing Authorization in the drop handling path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows ... |
| CVE-2026-67421 | MEDIUM | 4.5 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Man... |
| CVE-2026-67415 | MEDIUM | 5.9 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted at... |
| CVE-2026-67413 | MEDIUM | 6 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmq_j... |
| CVE-2026-67412 | MEDIUM | 6 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation u... |
| CVE-2026-67411 | MEDIUM | 6 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT a... |
| CVE-2026-67407 | MEDIUM | 5.1 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3 and 4.2.9 and 4.1.14 and 4.0.23, Incomplete fix for... |
| CVE-2026-67406 | MEDIUM | 4.6 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format ... |
| CVE-2026-67242 | MEDIUM | 6.3 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isinteger(Exp) guard skips token-... |
| CVE-2026-67241 | MEDIUM | 4.8 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, AMQP 1.0 management exchange.declare ski... |
| CVE-2026-67230 | MEDIUM | 6.3 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSoc... |
| CVE-2026-67227 | MEDIUM | 5.9 | — | Sep 25, 2026 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7 and 4.3.1, Atom exhaustion: t... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now