2026 CVE Vulnerabilities
56,998 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-15685 | HIGH | 7.5 | 0.4% | Jul 13, 2026 | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote... |
| CVE-2026-15684 | HIGH | 7.3 | 0.1% | Jul 13, 2026 | Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attac... |
| CVE-2026-15683 | HIGH | 7.5 | 0.1% | Jul 13, 2026 | Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulne... |
| CVE-2026-15682 | MEDIUM | 5.5 | 0.1% | Jul 13, 2026 | AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to... |
| CVE-2026-15681 | MEDIUM | 5.5 | 0.1% | Jul 13, 2026 | AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to cr... |
| CVE-2026-15680 | HIGH | 7.5 | 0.3% | Jul 13, 2026 | Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerabil... |
| CVE-2026-15598 | MEDIUM | 6.3 | 0.3% | Jul 13, 2026 | A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/ob... |
| CVE-2026-15597 | HIGH | 7.3 | 0.3% | Jul 13, 2026 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/2.php. This affects an unkno... |
| CVE-2026-15596 | MEDIUM | 4.3 | 0.3% | Jul 13, 2026 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unkno... |
| CVE-2026-58410 | HIGH | 7.1 | 0.2% | Jul 13, 2026 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the fam... |
| CVE-2026-58409 | CRITICAL | 9.1 | 0.5% | Jul 13, 2026 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, an authenticated administrator can achieve... |
| CVE-2026-48364 | HIGH | 8.2 | 0.3% | Jul 13, 2026 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that c... |
| CVE-2026-48363 | HIGH | 8.2 | 0.3% | Jul 13, 2026 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that c... |
| CVE-2026-15595 | MEDIUM | 4.3 | 0.3% | Jul 13, 2026 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unkno... |
| CVE-2026-15594 | LOW | 3.7 | 0.3% | Jul 13, 2026 | A vulnerability was found in waooAI waoowaoo up to 0.4.1. Impacted is the function stablePublicIdFromStorageKey in the l... |
| CVE-2026-58408 | MEDIUM | 6.5 | — | Jul 13, 2026 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, a low-privileged user can bypass the /admi... |
| CVE-2026-58407 | — | — | — | Jul 13, 2026 | Rejected reason: Please submit CVE requests for each vulnerability. |
| CVE-2026-55773 | HIGH | 8.8 | 0.3% | Jul 13, 2026 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi... |
| CVE-2026-55771 | HIGH | 8.8 | 0.3% | Jul 13, 2026 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi... |
| CVE-2026-12536 | MEDIUM | 6.4 | 0.2% | Jul 13, 2026 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Module Title’ para... |
| CVE-2026-12385 | MEDIUM | 4.3 | 0.2% | Jul 13, 2026 | The Smart Slider 3 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu... |
| CVE-2026-6875 | CRITICAL | 9.5 | — | Jul 13, 2026 | ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This v... |
| CVE-2026-58228 | MEDIUM | 5.1 | — | Jul 13, 2026 | Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme validat... |
| CVE-2026-55772 | HIGH | 8.8 | 0.5% | Jul 13, 2026 | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi... |
| CVE-2026-49972 | HIGH | 8.8 | 0.8% | Jul 13, 2026 | Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated attackers to achieve remo... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now