2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
8 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-48358 Adobe Commerce | CRITICAL9.1 | Adobe Commerce | CWE-116 | 1.2% | Jul 14, 2026 |
| CVE-2026-33941 Handlebarsjs Handlebars | HIGH8.2 | Handlebarsjs Handlebars | CWE-79 Cross Site Scripting | 0.2% | Mar 27, 2026 |
| CVE-2026-32811 Dadrus Heimdall | HIGH8.2 | Dadrus Heimdall | CWE-116 | 0.4% | Mar 20, 2026 |
| CVE-2026-32754 Freescout | CRITICAL9.3 | Freescout | CWE-79 Cross Site Scripting | 0.6% | Mar 19, 2026 |
| CVE-2026-33301 Open-Emr Openemr | HIGH7.1 | Open-Emr Openemr | CWE-116 | 0.4% | Mar 19, 2026 |
| CVE-2026-27812 Sub2api | HIGH8.0 | Sub2api | CWE-116 | 0.4% | Feb 26, 2026 |
| CVE-2026-25755 Parall Jspdf | HIGH8.1 | Parall Jspdf | CWE-94 Code Injection | 0.8% | Feb 19, 2026 |
| CVE-2025-59158 Coollabs Coolify | CRITICAL9.4 | Coollabs Coolify | CWE-116 | 0.5% | Jan 5, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications