2026 CVE Vulnerabilities
56,974 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-58658 | HIGH | 8.8 | — | Jul 15, 2026 | GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that a... |
| CVE-2026-56687 | HIGH | 7.8 | — | Jul 15, 2026 | Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. A low privileged attack... |
| CVE-2026-56087 | MEDIUM | 6.1 | — | Jul 15, 2026 | Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. An attacker with ph... |
| CVE-2026-53518 | HIGH | 8.1 | 0.5% | Jul 15, 2026 | Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oau... |
| CVE-2026-53517 | HIGH | 8.1 | 0.4% | Jul 15, 2026 | Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-a... |
| CVE-2026-53516 | HIGH | 8.3 | 0.2% | Jul 15, 2026 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback... |
| CVE-2026-53515 | HIGH | 7.1 | 0.2% | Jul 15, 2026 | Better Auth is an authentication and authorization library for TypeScript. From 1.2.10 until 1.6.11, the @better-auth/ss... |
| CVE-2026-53514 | HIGH | 7.7 | 0.2% | Jul 15, 2026 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, and in 1.6.14 and later when... |
| CVE-2026-53513 | CRITICAL | 9.6 | 0.3% | Jul 15, 2026 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin'... |
| CVE-2026-53512 | CRITICAL | 9.1 | 0.3% | Jul 15, 2026 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the legacy oidcProvider and ... |
| CVE-2026-50562 | CRITICAL | 9.3 | — | Jul 15, 2026 | FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, ar... |
| CVE-2026-45337 | HIGH | 7.6 | 0.1% | Jul 15, 2026 | Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorizat... |
| CVE-2026-40501 | HIGH | 8.8 | — | Jul 15, 2026 | Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in S... |
| CVE-2026-20298 | MEDIUM | 6.5 | 0.2% | Jul 15, 2026 | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.26... |
| CVE-2026-20297 | HIGH | 7.2 | 0.5% | Jul 15, 2026 | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below... |
| CVE-2026-20296 | HIGH | 8.3 | 0.2% | Jul 15, 2026 | In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.26... |
| CVE-2026-14961 | MEDIUM | 6.2 | — | Jul 15, 2026 | Pegatron `Tdelo64.sys` exposes a privileged device interface, `\\.\TdeIo`, that fails to properly restrict access to sen... |
| CVE-2026-14960 | CRITICAL | 9.8 | 0.2% | Jul 15, 2026 | Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\TdeIo` device interf... |
| CVE-2026-12382 | HIGH | 8.2 | 0.4% | Jul 15, 2026 | A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove t... |
| CVE-2026-10673 | HIGH | 8.8 | 0.2% | Jul 15, 2026 | The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ether... |
| CVE-2026-62378 | CRITICAL | 9 | 0.3% | Jul 15, 2026 | RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS C... |
| CVE-2026-62287 | — | — | — | Jul 15, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61873. Reason: This candidate is a ... |
| CVE-2026-62248 | — | — | — | Jul 15, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61438. Reason: This candidate is a ... |
| CVE-2026-62180 | — | — | — | Jul 15, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61440. Reason: This candidate is a ... |
| CVE-2026-62178 | — | — | — | Jul 15, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61427. Reason: This candidate is a ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now