2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
22 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-106509 Linuxfoundation Backstage Plugin-Techdocs-Node | HIGH7.7 | Linuxfoundation Backstage Plugin-Techdocs-Node | CWE-94 Code Injection | 0.4% | Oct 6, 2026 |
| CVE-2026-47727 Triliumnotes Trilium | HIGH8.6 | Triliumnotes Trilium | CWE-94 Code Injection | 0.7% | Aug 27, 2026 |
| CVE-2026-44181 Jupyter Enterprise Gateway | CRITICAL10.0 | Jupyter Enterprise Gateway | CWE-1336 | 0.8% | Jul 16, 2026 |
| CVE-2026-42203 Litellm | HIGH8.6 | Litellm | CWE-1336 | 0.7% | May 8, 2026 |
| CVE-2026-34587 Getkirby Kirby | HIGH7.6 | Getkirby Kirby | CWE-1336 | 0.5% | Apr 24, 2026 |
| CVE-2026-39980 Citeum Opencti | CRITICAL9.1 | Citeum Opencti | CWE-1336 | 0.7% | Apr 9, 2026 |
| CVE-2026-34724 Zammad | HIGH8.7 | Zammad | CWE-94 Code Injection | 0.5% | Apr 8, 2026 |
| CVE-2026-35044 Bentoml | HIGH8.8 | Bentoml | CWE-1336 | 0.5% | Apr 6, 2026 |
| CVE-2026-26026 Glpi-Project Glpi | CRITICAL9.1 | Glpi-Project Glpi | CWE-94 Code Injection | 0.5% | Apr 6, 2026 |
| CVE-2026-34202 Zfnd Zebra | CRITICAL9.2 | Zfnd Zebra | CWE-94 Code Injection | 0.9% | Mar 31, 2026 |
| CVE-2026-34172 Giskard-Agent | HIGH7.7 | Giskard-Agent | CWE-1336 | 0.8% | Mar 31, 2026 |
| CVE-2026-33654 Nanobot | HIGH8.9 | Nanobot | CWE-94 Code Injection | 0.7% | Mar 27, 2026 |
| CVE-2026-33154 Dynaconf | HIGH7.5 | Dynaconf | CWE-94 Code Injection | 0.5% | Mar 20, 2026 |
| CVE-2026-28784 Craftcms Craft Cms | HIGH8.6 | Craftcms Craft Cms | CWE-1336 | 0.7% | Mar 4, 2026 |
| CVE-2026-28783 Craftcms Craft Cms | CRITICAL9.4 | Craftcms Craft Cms | CWE-94 Code Injection | 0.6% | Mar 4, 2026 |
| CVE-2026-28697 Craftcms Craft Cms | CRITICAL9.4 | Craftcms Craft Cms | CWE-1336 | 1.1% | Mar 4, 2026 |
| CVE-2026-28695 Craftcms Craft Cms | HIGH7.5 | Craftcms Craft Cms | CWE-1336 | 0.6% | Mar 4, 2026 |
| CVE-2026-26938 Elastic Kibana | HIGH8.6 | Elastic Kibana | CWE-1336 | 0.4% | Feb 26, 2026 |
| CVE-2026-22244 Open-Metadata Openmetadata | HIGH8.5 | Open-Metadata Openmetadata | CWE-1336 | 1.3% | Jan 8, 2026 |
| CVE-2026-21450 Webkul Bagisto | HIGH7.3 | Webkul Bagisto | CWE-1336 | 1.4% | Jan 2, 2026 |
| CVE-2026-21449 Webkul Bagisto | HIGH7.4 | Webkul Bagisto | CWE-1336 | 0.5% | Jan 2, 2026 |
| CVE-2026-21448 Webkul Bagisto | HIGH8.9 | Webkul Bagisto | CWE-1336 | 0.9% | Jan 2, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications