Week 8, 2026

16 February to 22 February 2026. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.

CVEs published: 1,312
Critical: 113
High: 475
Added to KEV: 8

Critical 113High 475Medium 691Low 33Not scored 0All 1,312 in the list

Added to KEVAttackers use these now; patch them first

CVE-2025-49113
Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not…
Roundcube · Webmail
ExploitedCritical9.9
CVE-2025-68461
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
Roundcube · Webmail
ExploitedHigh7.2
CVE-2026-22769
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an…
Dell · RecoverPoint for Virtual Machines
ExploitedCritical10.0
CVE-2021-22175
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5…
GitLab · GitLab
ExploitedMedium6.8
CVE-2020-7796
Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.
Product not named
ExploitedCritical9.8
CVE-2026-2441
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.…
Google · Chrome
ExploitedHigh8.8
CVE-2008-0015
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control…
Product not named
ExploitedHigh8.8
CVE-2024-7694
TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload
TeamT5 · ThreatSonar Anti-Ransomware
ExploitedHigh7.2

Most severe new CVEsBy CVSS score

CVE-2026-22769
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an…
Dell · RecoverPoint for Virtual Machines
ExploitedCritical10.0
CVE-2026-26030
Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
microsoft · semantic-kernel
Critical10.0
CVE-2021-35402
PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for…
PROLiNK · PRC2402M
Critical10.0
CVE-2025-14009
Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution
nltk · nltk/nltk
Critical10.0
CVE-2025-30411
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows)…
Acronis · Acronis Cyber Protect 16
Critical10.0
CVE-2025-30412
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows)…
Acronis · Acronis Cyber Protect 16
Critical10.0
CVE-2026-2577
Nanobot Unauthenticated WhatsApp Session Hijack via WebSocket Bridge
HKUDS · nanobot
Critical10.0
CVE-2026-2731
Unauthenticated RCE in Dynamicweb 9 and Dynamicweb 8
DynamicWeb · DynamicWeb 9
Critical10.0
CVE-2026-27574
OneUptime: node:vm sandbox escape in probe allows any project member to achieve RCE
OneUptime · oneuptime
Critical10.0
CVE-2025-15586
OGP-Website installs prior git commit 52f865a4fba763594453068acf8fa9e3fc38d663 are affected by a type juggling flaw which if exploited can result in…
OpenGamePanel · OGP-Website
Critical10.0

Week 8, 2026

Added to KEVAttackers use these now; patch them first

Most severe new CVEsBy CVSS score

Vendors with the most CVEs

Most common weaknesses