2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
25 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-110111 the affected product | HIGH7.7 | the affected product | CWE-1321 Prototype Pollution | 0.6% | Oct 13, 2026 |
| CVE-2021-48012 the affected product | HIGH8.8 | the affected product | CWE-1321 Prototype Pollution | 0.4% | Oct 12, 2026 |
| CVE-2026-59206 N8n | HIGH7.1 | N8n | CWE-1321 Prototype Pollution | 0.7% | Jul 9, 2026 |
| CVE-2026-44791 N8n | CRITICAL9.4 | N8n | CWE-1321 Prototype Pollution | 0.5% | Jun 23, 2026 |
| CVE-2026-44789 N8n | CRITICAL9.4 | N8n | CWE-1321 Prototype Pollution | 0.5% | Jun 23, 2026 |
| CVE-2026-54312 N8n | HIGH7.2 | N8n | CWE-1321 Prototype Pollution | 0.4% | Jun 23, 2026 |
| CVE-2026-44495 Axios | HIGH7.0 | Axios | CWE-94 Code Injection | 1.0% | Jun 11, 2026 |
| CVE-2026-44966 Shepherdwind Velocity.Js | HIGH8.3 | Shepherdwind Velocity.Js | CWE-1321 Prototype Pollution | 0.6% | May 26, 2026 |
| CVE-2026-42264 Axios | HIGH7.4 | Axios | CWE-1321 Prototype Pollution | 0.8% | May 8, 2026 |
| CVE-2026-42232 N8n | CRITICAL9.4 | N8n | CWE-1321 Prototype Pollution | 0.5% | May 4, 2026 |
| CVE-2026-42231 N8n | CRITICAL9.4 | N8n | CWE-1321 Prototype Pollution | 0.8% | May 4, 2026 |
| CVE-2026-34221 Mikro-Orm Mikroorm | HIGH8.3 | Mikro-Orm Mikroorm | CWE-1321 Prototype Pollution | 0.5% | Mar 31, 2026 |
| CVE-2026-33696 N8n | CRITICAL9.4 | N8n | CWE-1321 Prototype Pollution | 0.8% | Mar 25, 2026 |
| CVE-2026-33228 Webreflection Flatted | HIGH8.9 | Webreflection Flatted | CWE-1321 Prototype Pollution | 1.0% | Mar 20, 2026 |
| CVE-2026-32886 Parseplatform Parse-Server | HIGH8.2 | Parseplatform Parse-Server | CWE-1321 Prototype Pollution | 0.7% | Mar 18, 2026 |
| CVE-2026-30939 Parseplatform Parse-Server | HIGH8.8 | Parseplatform Parse-Server | CWE-1321 Prototype Pollution | 0.8% | Mar 10, 2026 |
| CVE-2026-29063 Immutable-Js Immutable | HIGH8.7 | Immutable-Js Immutable | CWE-1321 Prototype Pollution | 1.6% | Mar 6, 2026 |
| CVE-2026-28794 Orpc | CRITICAL9.3 | Orpc | CWE-1321 Prototype Pollution | 1.3% | Mar 6, 2026 |
| CVE-2026-27212 Swiperjs Swiper | CRITICAL9.4 | Swiperjs Swiper | CWE-1321 Prototype Pollution | 0.5% | Feb 21, 2026 |
| CVE-2026-26021 Set-In Project Set-In | CRITICAL9.4 | Set-In Project Set-In | CWE-1321 Prototype Pollution | 0.6% | Feb 11, 2026 |
| CVE-2026-25881 Nyariv Sandboxjs | CRITICAL9.0 | Nyariv Sandboxjs | CWE-1321 Prototype Pollution | 0.7% | Feb 9, 2026 |
| CVE-2026-25521 Locutus | CRITICAL9.4 | Locutus | CWE-1321 Prototype Pollution | 0.5% | Feb 4, 2026 |
| CVE-2026-25150 Qwik | CRITICAL9.3 | Qwik | CWE-1321 Prototype Pollution | 0.7% | Feb 3, 2026 |
| CVE-2026-25047 Sharpred Deephas | CRITICAL9.4 | Sharpred Deephas | CWE-1321 Prototype Pollution | 0.8% | Jan 29, 2026 |
| CVE-2026-23736 Lxsmnsyc Seroval | HIGH7.3 | Lxsmnsyc Seroval | CWE-1321 Prototype Pollution | 0.3% | Jan 21, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications