CVEs published February 2 to February 8, 2026
1,192 CVEs were published Feb 2 to Feb 8, 2026, 94 of them critical. CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,192
- Critical
- 94
- Added to CISA KEV
- 6
- Busiest day
- Tue, Feb 3 (337)
- Quietest day
- Sat, Feb 7 (62)
- February 2, 2026156 CVEs · 16 critical
- February 3, 2026337 CVEs · 27 critical
- February 4, 2026251 CVEs · 21 critical
- February 5, 2026117 CVEs · 6 critical
- February 6, 2026194 CVEs · 22 critical
- February 7, 202662 CVEs · 1 critical
- February 8, 202675 CVEs · 1 critical
Added to CISA KEV 6
- CVE-2019-19006Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.
- CVE-2021-39935An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 beforeGitLab
- CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Web Help Desk
- CVE-2025-64328FreePBX Administration GUI is Vulnerable to Authenticated Command InjectionFreePBX filestore
- CVE-2025-11953Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests@react-native-community/cli-server-api · @react-native-comm…
- CVE-2026-24423SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub APISmarterTools SmarterMail