2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
128 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-101943 the affected product | HIGH8.7 | the affected product | CWE-20 Improper Input Validation | n/a | Oct 14, 2026 |
| CVE-2026-100135 the affected product | HIGH7.5 | the affected product | CWE-20 Improper Input Validation | 0.6% | Oct 13, 2026 |
| CVE-2026-100113 the affected product | HIGH7.5 | the affected product | CWE-20 Improper Input Validation | 0.6% | Oct 13, 2026 |
| CVE-2026-76468 the affected product | HIGH8.2 | the affected product | CWE-20 Improper Input Validation | 0.2% | Oct 7, 2026 |
| CVE-2026-102677 Electronjs Electron | HIGH7.8 | Electronjs Electron | CWE-20 Improper Input Validation | 0.1% | Sep 29, 2026 |
| CVE-2026-88774 Citrix Netscaler Application Delivery Controller | HIGH7.0 | Citrix Netscaler Application Delivery Controller | CWE-20 Improper Input Validation | 0.2% | Sep 27, 2026 |
| CVE-2026-88771 Exploited Citrix NetScaler | CRITICAL9.5 | Citrix NetScaler | CWE-20 Improper Input Validation | 1.1% | Sep 27, 2026 |
| CVE-2026-100833 the affected product | HIGH8.6 | the affected product | CWE-20 Improper Input Validation | 0.2% | Sep 27, 2026 |
| CVE-2026-100652 Vllm | HIGH8.2 | Vllm | CWE-20 Improper Input Validation | 0.4% | Sep 26, 2026 |
| CVE-2026-95843 Moquette | HIGH8.7 | Moquette | CWE-20 Improper Input Validation | 0.4% | Sep 23, 2026 |
| CVE-2026-84135 Mozilla Firefox Mobile | CRITICAL9.8 | Mozilla Firefox Mobile | CWE-20 Improper Input Validation | 0.4% | Sep 1, 2026 |
| CVE-2026-59354 Vmware Spring Security | CRITICAL9.6 | Vmware Spring Security | CWE-20 Improper Input Validation | 0.5% | Aug 27, 2026 |
| CVE-2026-17414 Ibm Power System S1122 (9824-22a) Firmware | HIGH8.1 | Ibm Power System S1122 (9824-22a) Firmware | CWE-20 Improper Input Validation | 0.2% | Aug 19, 2026 |
| CVE-2026-61363 Microsoft Windows 10 1607 | HIGH7.5 | Microsoft Windows 10 1607 | CWE-20 Improper Input Validation | 0.7% | Aug 11, 2026 |
| CVE-2026-59134 Microsoft Windows 10 1607 | HIGH7.5 | Microsoft Windows 10 1607 | CWE-20 Improper Input Validation | 0.7% | Aug 11, 2026 |
| CVE-2026-21273 Adobe Coldfusion | HIGH8.7 | Adobe Coldfusion | CWE-20 Improper Input Validation | 0.9% | Aug 11, 2026 |
| CVE-2026-59650 Bouncycastle Bc-Java | CRITICAL9.3 | Bouncycastle Bc-Java | CWE-20 Improper Input Validation | 0.3% | Aug 3, 2026 |
| CVE-2026-67326 Gitpython Project Gitpython | HIGH7.3 | Gitpython Project Gitpython | CWE-20 Improper Input Validation | 0.3% | Aug 1, 2026 |
| CVE-2026-58183 Apache Traffic Server | HIGH8.2 | Apache Traffic Server | CWE-20 Improper Input Validation | 0.7% | Jul 29, 2026 |
| CVE-2026-33267 Apache Traffic Server | HIGH7.7 | Apache Traffic Server | CWE-20 Improper Input Validation | 0.6% | Jul 29, 2026 |
| CVE-2026-54120 Microsoft Surface Management Services | CRITICAL9.9 | Microsoft Surface Management Services | CWE-20 Improper Input Validation | 1.0% | Jul 24, 2026 |
| CVE-2026-46738 Dell Powerprotect Data Manager | CRITICAL9.1 | Dell Powerprotect Data Manager | CWE-20 Improper Input Validation | 0.5% | Jul 22, 2026 |
| CVE-2026-40712 Dell Powerprotect Data Manager | CRITICAL9.1 | Dell Powerprotect Data Manager | CWE-20 Improper Input Validation | 0.5% | Jul 22, 2026 |
| CVE-2026-16414 Google Chrome | HIGH7.8 | Google Chrome | CWE-20 Improper Input Validation | 0.1% | Jul 21, 2026 |
| CVE-2026-53411 Zoom Workplace Virtual Desktop Infrastructure | HIGH7.8 | Zoom Workplace Virtual Desktop Infrastructure | CWE-20 Improper Input Validation | 0.1% | Jul 16, 2026 |
| CVE-2026-56398 Openwebui Open Webui | HIGH8.5 | Openwebui Open Webui | CWE-20 Improper Input Validation | 0.6% | Jul 15, 2026 |
| CVE-2026-48334 Adobe Illustrator | CRITICAL9.3 | Adobe Illustrator | CWE-20 Improper Input Validation | 1.0% | Jul 14, 2026 |
| CVE-2026-48284 Adobe Coldfusion | CRITICAL9.6 | Adobe Coldfusion | CWE-20 Improper Input Validation | 0.5% | Jul 14, 2026 |
| CVE-2026-50670 Microsoft Windows 10 1809 | HIGH8.8 | Microsoft Windows 10 1809 | CWE-20 Improper Input Validation | 0.3% | Jul 14, 2026 |
| CVE-2026-57985 Microsoft Edge Chromium | HIGH7.6 | Microsoft Edge Chromium | CWE-20 Improper Input Validation | 0.7% | Jul 3, 2026 |
| CVE-2026-54402 Ui Unifi Os Server | CRITICAL9.9 | Ui Unifi Os Server | CWE-20 Improper Input Validation | 1.8% | Jul 2, 2026 |
| CVE-2026-53492 Linuxfoundation Containerd | HIGH8.4 | Linuxfoundation Containerd | CWE-20 Improper Input Validation | 0.4% | Jul 1, 2026 |
| CVE-2026-53488 Linuxfoundation Containerd | CRITICAL9.4 | Linuxfoundation Containerd | CWE-20 Improper Input Validation | 0.2% | Jul 1, 2026 |
| CVE-2026-14120 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.3% | Jun 30, 2026 |
| CVE-2026-14109 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.3% | Jun 30, 2026 |
| CVE-2026-14106 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.3% | Jun 30, 2026 |
| CVE-2026-14104 Google Chrome | CRITICAL9.8 | Google Chrome | CWE-20 Improper Input Validation | 0.5% | Jun 30, 2026 |
| CVE-2026-13781 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.4% | Jun 30, 2026 |
| CVE-2026-13780 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.4% | Jun 30, 2026 |
| CVE-2026-13777 Google Chrome | HIGH8.8 | Google Chrome | CWE-20 Improper Input Validation | 0.3% | Jun 30, 2026 |
| CVE-2026-12246 Nlnetlabs Nsd | HIGH7.2 | Nlnetlabs Nsd | CWE-20 Improper Input Validation | 0.4% | Jun 25, 2026 |
| CVE-2026-12537 Google Gemini-Cli | CRITICAL10.0 | Google Gemini-Cli | CWE-20 Improper Input Validation | 0.2% | Jun 24, 2026 |
| CVE-2026-49444 N8n | HIGH7.1 | N8n | CWE-20 Improper Input Validation | 0.4% | Jun 23, 2026 |
| CVE-2026-54299 Astro | HIGH7.5 | Astro | CWE-20 Improper Input Validation | 0.3% | Jun 22, 2026 |
| CVE-2026-56340 Vllm | HIGH8.7 | Vllm | CWE-20 Improper Input Validation | 0.6% | Jun 20, 2026 |
| CVE-2026-12569 Exploited PTC Windchill and FlexPLM | CRITICAL9.3 | PTC Windchill and FlexPLM | CWE-20 Improper Input Validation | 46.0% | Jun 18, 2026 |
| CVE-2026-50628 Apache Cxf | CRITICAL9.8 | Apache Cxf | CWE-20 Improper Input Validation | 1.0% | Jun 12, 2026 |
| CVE-2026-46669 Openvm | HIGH8.7 | Openvm | CWE-20 Improper Input Validation | 0.4% | Jun 10, 2026 |
| CVE-2026-45328 Espressif Esp-Idf | CRITICAL9.3 | Espressif Esp-Idf | CWE-20 Improper Input Validation | 0.2% | Jun 10, 2026 |
| CVE-2026-47931 Adobe Coldfusion | HIGH8.4 | Adobe Coldfusion | CWE-20 Improper Input Validation | 0.5% | Jun 9, 2026 |
Page 1 of 3
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications