2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
5,004 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-81534 the affected product | HIGH8.8 | the affected product | CWE-74 | n/a | Oct 15, 2026 |
| CVE-2026-88043 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | n/a | Oct 15, 2026 |
| CVE-2026-18586 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | n/a | Oct 15, 2026 |
| CVE-2026-18548 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | n/a | Oct 15, 2026 |
| CVE-2026-17031 the affected product | HIGH8.1 | the affected product | CWE-862 Missing Authorization | n/a | Oct 15, 2026 |
| CVE-2026-15090 the affected product | HIGH7.5 | the affected product | CWE-89 SQL Injection | n/a | Oct 15, 2026 |
| CVE-2026-3712 the affected product | HIGH7.3 | the affected product | CWE-918 Server Side Request Forgery | n/a | Oct 15, 2026 |
| CVE-2026-108587 the affected product | CRITICAL9.8 | the affected product | CWE-434 Unrestricted File Upload | n/a | Oct 15, 2026 |
| CVE-2026-77931 the affected product | HIGH8.7 | the affected product | Not classified | n/a | Oct 15, 2026 |
| CVE-2026-76066 the affected product | HIGH8.7 | the affected product | CWE-862 Missing Authorization | n/a | Oct 15, 2026 |
| CVE-2026-109430 the affected product | HIGH8.7 | the affected product | CWE-611 XML External Entity | n/a | Oct 15, 2026 |
| CVE-2026-0993 the affected product | HIGH8.7 | the affected product | CWE-120 Classic Buffer Overflow | n/a | Oct 15, 2026 |
| CVE-2026-110873 the affected product | HIGH7.1 | the affected product | CWE-863 Incorrect Authorization | n/a | Oct 14, 2026 |
| CVE-2026-110869 the affected product | HIGH8.7 | the affected product | CWE-1333 | n/a | Oct 14, 2026 |
| CVE-2026-110868 the affected product | HIGH8.4 | the affected product | CWE-918 Server Side Request Forgery | n/a | Oct 14, 2026 |
| CVE-2026-110867 the affected product | CRITICAL9.0 | the affected product | CWE-863 Incorrect Authorization | n/a | Oct 14, 2026 |
| CVE-2026-110865 the affected product | HIGH7.1 | the affected product | CWE-424 | n/a | Oct 14, 2026 |
| CVE-2026-110864 the affected product | CRITICAL9.1 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-110863 the affected product | HIGH8.6 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-110862 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-110859 the affected product | HIGH8.7 | the affected product | CWE-88 | n/a | Oct 14, 2026 |
| CVE-2026-110858 the affected product | CRITICAL9.2 | the affected product | CWE-88 | n/a | Oct 14, 2026 |
| CVE-2026-110857 the affected product | HIGH7.7 | the affected product | CWE-1287 | n/a | Oct 14, 2026 |
| CVE-2026-110856 the affected product | HIGH8.7 | the affected product | CWE-1333 | n/a | Oct 14, 2026 |
| CVE-2026-110839 the affected product | HIGH7.1 | the affected product | CWE-787 Out of Bounds Write | n/a | Oct 14, 2026 |
| CVE-2026-110838 the affected product | HIGH8.7 | the affected product | CWE-306 Missing Authentication | n/a | Oct 14, 2026 |
| CVE-2026-110770 the affected product | CRITICAL9.2 | the affected product | CWE-307 | n/a | Oct 14, 2026 |
| CVE-2026-110769 the affected product | HIGH8.3 | the affected product | CWE-1188 | n/a | Oct 14, 2026 |
| CVE-2026-110767 the affected product | HIGH8.7 | the affected product | CWE-59 | n/a | Oct 14, 2026 |
| CVE-2026-110536 the affected product | CRITICAL9.3 | the affected product | CWE-77 Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-86567 the affected product | HIGH8.8 | the affected product | CWE-416 Use After Free | n/a | Oct 14, 2026 |
| CVE-2026-86461 the affected product | HIGH8.8 | the affected product | CWE-434 Unrestricted File Upload | n/a | Oct 14, 2026 |
| CVE-2026-101982 the affected product | CRITICAL9.3 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-101981 the affected product | HIGH8.7 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-101954 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-0322 Exploited Palo Alto Networks PAN-OS | HIGH8.6 | Palo Alto Networks PAN-OS | CWE-94 Code Injection | n/a | Oct 14, 2026 |
| CVE-2026-86562 the affected product | HIGH7.8 | the affected product | CWE-362 Race Condition | n/a | Oct 14, 2026 |
| CVE-2026-15102 the affected product | HIGH7.5 | the affected product | CWE-319 | n/a | Oct 14, 2026 |
| CVE-2026-109439 the affected product | CRITICAL9.3 | the affected product | CWE-306 Missing Authentication | n/a | Oct 14, 2026 |
| CVE-2026-102178 the affected product | CRITICAL9.3 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-102176 the affected product | HIGH8.7 | the affected product | CWE-120 Classic Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-102175 the affected product | CRITICAL9.3 | the affected product | CWE-122 Heap Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-102174 the affected product | HIGH8.7 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-102064 the affected product | HIGH8.7 | the affected product | CWE-617 | n/a | Oct 14, 2026 |
| CVE-2026-102061 the affected product | HIGH8.7 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-102059 the affected product | HIGH8.7 | the affected product | CWE-78 OS Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-102056 the affected product | HIGH7.1 | the affected product | CWE-125 Out of Bounds Read | n/a | Oct 14, 2026 |
| CVE-2026-102055 the affected product | HIGH8.7 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-102052 the affected product | HIGH8.7 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-102050 the affected product | HIGH8.7 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
Page 1 of 101
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications