2026 CVE Vulnerabilities
56,949 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16150 | MEDIUM | 6.3 | 0.3% | Jul 18, 2026 | A vulnerability was found in RobinHerbots Inputmask up to 5.0.9. Affected by this issue is the function extendDefaults/e... |
| CVE-2026-16133 | MEDIUM | 5 | 0.8% | Jul 18, 2026 | A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function child_process.spaw... |
| CVE-2026-16131 | MEDIUM | 6.3 | 0.2% | Jul 18, 2026 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the f... |
| CVE-2026-16130 | MEDIUM | 4.4 | 0.1% | Jul 18, 2026 | A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validate_path of th... |
| CVE-2026-16129 | MEDIUM | 5.3 | 0.2% | Jul 18, 2026 | A vulnerability has been found in princezuda SafestClaw up to 4.2.4. This vulnerability affects the function ShellAction... |
| CVE-2026-16128 | HIGH | 7.3 | 0.3% | Jul 18, 2026 | A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the function receiver_thread of the file... |
| CVE-2026-16127 | HIGH | 7.3 | 0.3% | Jul 18, 2026 | A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function claw_net_get/claw_net_post of th... |
| CVE-2026-16126 | HIGH | 7.3 | 0.3% | Jul 18, 2026 | A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted element is the function handle_rpc_request of... |
| CVE-2026-16125 | HIGH | 7.3 | 0.3% | Jul 18, 2026 | A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post... |
| CVE-2026-16124 | MEDIUM | 6.3 | 0.3% | Jul 18, 2026 | A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function Ch... |
| CVE-2026-16123 | MEDIUM | 6.3 | 0.2% | Jul 18, 2026 | A weakness has been identified in nextlevelbuilder GoClaw up to 3.13.2. Affected by this issue is the function ToolsInvo... |
| CVE-2026-16122 | MEDIUM | 4.3 | 0.2% | Jul 18, 2026 | A security flaw has been discovered in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the funct... |
| CVE-2026-16121 | MEDIUM | 6.3 | 0.2% | Jul 18, 2026 | A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.2. Affected is the function isSafeBin of the file i... |
| CVE-2026-9323 | CRITICAL | 9.2 | 0.4% | Jul 18, 2026 | The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by c... |
| CVE-2026-16120 | MEDIUM | 6.3 | 0.2% | Jul 18, 2026 | A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the function matchesAllowlis... |
| CVE-2026-16119 | MEDIUM | 6.3 | 0.3% | Jul 18, 2026 | A vulnerability was found in nextlevelbuilder GoClaw up to 3.13.2. This affects the function RequestApproval of the file... |
| CVE-2026-16117 | CRITICAL | 10 | 0.3% | Jul 18, 2026 | Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segme... |
| CVE-2026-11826 | HIGH | 8.8 | 0.4% | Jul 18, 2026 | OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_master.cpp. getData(... |
| CVE-2026-9147 | HIGH | 7.8 | 0.2% | Jul 18, 2026 | uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runti... |
| CVE-2026-59173 | HIGH | 7.5 | 0.5% | Jul 18, 2026 | Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: fro... |
| CVE-2026-16158 | CRITICAL | 10 | 0.2% | Jul 18, 2026 | Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by conca... |
| CVE-2026-15631 | CRITICAL | 10 | 0.3% | Jul 18, 2026 | Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebSocket desti... |
| CVE-2026-16097 | HIGH | 8.8 | 0.5% | Jul 18, 2026 | A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C of the component Sch... |
| CVE-2026-16096 | HIGH | 8.8 | 0.4% | Jul 18, 2026 | A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40BB50 of th... |
| CVE-2026-16095 | HIGH | 8.8 | 0.4% | Jul 18, 2026 | A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntr... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now