2026 CVE Vulnerabilities
56,994 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-41087 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis... |
| CVE-2026-40422 | MEDIUM | 5.5 | 0.3% | Jul 14, 2026 | Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally. |
| CVE-2026-40400 | HIGH | 8 | 0.6% | Jul 14, 2026 | Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network. |
| CVE-2026-40378 | HIGH | 7.5 | 0.8% | Jul 14, 2026 | Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unau... |
| CVE-2026-36214 | MEDIUM | 6.4 | 0.3% | Jul 14, 2026 | osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable... |
| CVE-2026-34349 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose in... |
| CVE-2026-34348 | MEDIUM | 6.5 | 0.7% | Jul 14, 2026 | Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over... |
| CVE-2026-34346 | MEDIUM | 5.5 | 0.2% | Jul 14, 2026 | Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized at... |
| CVE-2026-34328 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to dis... |
| CVE-2026-33842 | MEDIUM | 5.5 | 0.4% | Jul 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis... |
| CVE-2026-15703 | HIGH | 7.3 | 0.3% | Jul 14, 2026 | A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unkn... |
| CVE-2026-15702 | MEDIUM | 6.3 | 0.3% | Jul 14, 2026 | A security vulnerability has been detected in tamagui up to 2.3.0. This affects the function updateConfig of the file co... |
| CVE-2026-15701 | CRITICAL | 9.8 | 0.8% | Jul 14, 2026 | A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Lo... |
| CVE-2026-15700 | MEDIUM | 4.7 | 0.4% | Jul 14, 2026 | A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the function ExtractFile of th... |
| CVE-2026-15429 | HIGH | 8.8 | 0.4% | Jul 14, 2026 | A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling... |
| CVE-2026-15428 | HIGH | 8.8 | 0.9% | Jul 14, 2026 | An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain na... |
| CVE-2026-15427 | HIGH | 8.1 | 0.5% | Jul 14, 2026 | An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insuf... |
| CVE-2026-14646 | MEDIUM | 4.9 | 0.3% | Jul 14, 2026 | Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets re... |
| CVE-2026-14645 | MEDIUM | 5.1 | 0.4% | Jul 14, 2026 | Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configured URL before making ... |
| CVE-2026-9636 | HIGH | 8.2 | — | Jul 14, 2026 | A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Secu... |
| CVE-2026-9292 | HIGH | 8.4 | — | Jul 14, 2026 | A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability ste... |
| CVE-2026-9128 | HIGH | 7.5 | 0.1% | Jul 14, 2026 | A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External... |
| CVE-2026-9127 | HIGH | 7.5 | 0.1% | Jul 14, 2026 | A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on a con... |
| CVE-2026-9108 | HIGH | 7.5 | 0.1% | Jul 14, 2026 | A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths withi... |
| CVE-2026-7494 | MEDIUM | 5.3 | 0.1% | Jul 14, 2026 | Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A use... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now