2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
71 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-109341 the affected product | HIGH7.1 | the affected product | CWE-200 Information Exposure | 0.3% | Oct 12, 2026 |
| CVE-2026-106237 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-200 Information Exposure | 0.2% | Oct 6, 2026 |
| CVE-2026-105861 Payloadcms Payload | HIGH7.2 | Payloadcms Payload | CWE-200 Information Exposure | 0.2% | Oct 6, 2026 |
| CVE-2026-90441 Watchguard Fireware | HIGH7.1 | Watchguard Fireware | CWE-200 Information Exposure | 0.2% | Sep 30, 2026 |
| CVE-2026-102267 Pyjwt Project Pyjwt | HIGH7.4 | Pyjwt Project Pyjwt | CWE-200 Information Exposure | 0.2% | Sep 28, 2026 |
| CVE-2026-67410 Broadcom Rabbitmq Server | HIGH8.2 | Broadcom Rabbitmq Server | CWE-200 Information Exposure | 0.4% | Sep 25, 2026 |
| CVE-2026-77246 Mcp-Atlassian Mcp Atlassian | HIGH7.4 | Mcp-Atlassian Mcp Atlassian | CWE-22 Path Traversal | 0.4% | Sep 22, 2026 |
| CVE-2026-69805 Microsoft.Diagnostics.Runtime | HIGH7.5 | Microsoft.Diagnostics.Runtime | CWE-73 | 0.5% | Sep 8, 2026 |
| CVE-2026-86419 Misp-Project Misp | HIGH7.0 | Misp-Project Misp | CWE-200 Information Exposure | 0.4% | Sep 7, 2026 |
| CVE-2026-84143 Mozilla Firefox | CRITICAL9.8 | Mozilla Firefox | CWE-119 Memory Buffer Errors | 0.4% | Sep 1, 2026 |
| CVE-2026-84142 Mozilla Firefox | CRITICAL9.8 | Mozilla Firefox | CWE-119 Memory Buffer Errors | 0.6% | Sep 1, 2026 |
| CVE-2026-84135 Mozilla Firefox Mobile | CRITICAL9.8 | Mozilla Firefox Mobile | CWE-20 Improper Input Validation | 0.4% | Sep 1, 2026 |
| CVE-2026-59288 Vmware Spring For Graphql | HIGH7.4 | Vmware Spring For Graphql | CWE-200 Information Exposure | 0.4% | Aug 27, 2026 |
| CVE-2026-17060 Ibm Vios | HIGH8.1 | Ibm Vios | CWE-200 Information Exposure | 0.4% | Aug 20, 2026 |
| CVE-2026-75915 the affected product | HIGH8.7 | the affected product | CWE-200 Information Exposure | 0.7% | Aug 18, 2026 |
| CVE-2026-72804 the affected product | CRITICAL9.2 | the affected product | CWE-200 Information Exposure | 0.4% | Aug 12, 2026 |
| CVE-2026-54489 Dell Virtual Storage Integrator | CRITICAL9.1 | Dell Virtual Storage Integrator | CWE-200 Information Exposure | 0.6% | Aug 6, 2026 |
| CVE-2026-70478 Flowiseai Flowise | CRITICAL9.2 | Flowiseai Flowise | CWE-200 Information Exposure | 0.6% | Aug 4, 2026 |
| CVE-2026-70473 Flowiseai Flowise | HIGH8.3 | Flowiseai Flowise | CWE-200 Information Exposure | 0.5% | Aug 4, 2026 |
| CVE-2026-67320 Axios | HIGH8.3 | Axios | CWE-200 Information Exposure | 0.5% | Aug 1, 2026 |
| CVE-2026-13697 Nodejs Undici | HIGH7.4 | Nodejs Undici | CWE-200 Information Exposure | 0.6% | Jul 29, 2026 |
| CVE-2026-45623 Postcss | HIGH7.5 | Postcss | CWE-22 Path Traversal | 0.6% | Jul 27, 2026 |
| CVE-2026-62518 Oracle E-Business Suite | HIGH7.6 | Oracle E-Business Suite | CWE-200 Information Exposure | 0.3% | Jul 21, 2026 |
| CVE-2026-21579 Atlassian Confluence Data Center | HIGH8.2 | Atlassian Confluence Data Center | CWE-200 Information Exposure | 0.4% | Jul 21, 2026 |
| CVE-2026-15075 Eclipse Vert.X | HIGH8.2 | Eclipse Vert.X | CWE-200 Information Exposure | 0.2% | Jul 14, 2026 |
| CVE-2026-57219 Broadcom Rabbitmq Server | HIGH8.7 | Broadcom Rabbitmq Server | CWE-200 Information Exposure | 2.8% | Jul 10, 2026 |
| CVE-2026-59216 Openwebui Open Webui | HIGH7.7 | Openwebui Open Webui | CWE-94 Code Injection | 0.5% | Jul 9, 2026 |
| CVE-2026-56244 the affected product | HIGH7.1 | the affected product | CWE-200 Information Exposure | 0.3% | Jun 24, 2026 |
| CVE-2026-54305 N8n | HIGH8.9 | N8n | CWE-200 Information Exposure | 0.4% | Jun 23, 2026 |
| CVE-2026-54304 N8n | HIGH7.1 | N8n | CWE-200 Information Exposure | 0.4% | Jun 23, 2026 |
| CVE-2026-53571 Vitejs Vite | HIGH8.2 | Vitejs Vite | CWE-22 Path Traversal | 0.6% | Jun 22, 2026 |
| CVE-2026-49193 Acer Connect M6e 5g Firmware | HIGH8.7 | Acer Connect M6e 5g Firmware | CWE-200 Information Exposure | 0.4% | Jun 4, 2026 |
| CVE-2026-49187 Acer Connect M6e 5g Firmware | HIGH8.7 | Acer Connect M6e 5g Firmware | CWE-200 Information Exposure | 0.4% | Jun 4, 2026 |
| CVE-2026-44881 Portainer | HIGH8.5 | Portainer | CWE-59 | 0.6% | May 28, 2026 |
| CVE-2026-27886 Strapi | CRITICAL9.2 | Strapi | CWE-22 Path Traversal | 2.5% | May 14, 2026 |
| CVE-2026-41615 Microsoft Authenticator | CRITICAL9.6 | Microsoft Authenticator | CWE-200 Information Exposure | 1.1% | May 14, 2026 |
| CVE-2026-42283 Devspace | HIGH7.7 | Devspace | CWE-200 Information Exposure | 0.1% | May 14, 2026 |
| CVE-2026-40379 Microsoft Entra Id | CRITICAL9.3 | Microsoft Entra Id | CWE-200 Information Exposure | 0.9% | May 12, 2026 |
| CVE-2026-42826 Microsoft Azure Devops | CRITICAL10.0 | Microsoft Azure Devops | CWE-200 Information Exposure | 1.2% | May 7, 2026 |
| CVE-2026-41323 Kyverno | HIGH8.1 | Kyverno | CWE-200 Information Exposure | 0.6% | Apr 24, 2026 |
| CVE-2026-41278 Flowiseai Flowise | HIGH8.7 | Flowiseai Flowise | CWE-200 Information Exposure | 0.4% | Apr 23, 2026 |
| CVE-2026-41266 Flowiseai Flowise | HIGH7.7 | Flowiseai Flowise | CWE-200 Information Exposure | 0.5% | Apr 23, 2026 |
| CVE-2026-40885 Goshs | HIGH7.7 | Goshs | CWE-200 Information Exposure | 0.5% | Apr 21, 2026 |
| CVE-2026-40498 Freescout | HIGH8.9 | Freescout | CWE-200 Information Exposure | 0.7% | Apr 21, 2026 |
| CVE-2025-65104 Firebirdsql Firebird | HIGH7.9 | Firebirdsql Firebird | CWE-200 Information Exposure | 0.2% | Apr 17, 2026 |
| CVE-2025-15625 Sparxsystems Pro Cloud Server | CRITICAL9.5 | Sparxsystems Pro Cloud Server | CWE-89 SQL Injection | 0.4% | Apr 17, 2026 |
| CVE-2026-39363 Vitejs Vite | HIGH8.2 | Vitejs Vite | CWE-200 Information Exposure | 2.6% | Apr 7, 2026 |
| CVE-2025-15381 Lfprojects Mlflow | HIGH7.1 | Lfprojects Mlflow | CWE-200 Information Exposure | 0.3% | Mar 27, 2026 |
| CVE-2026-33745 Yhirose Cpp-Httplib | HIGH7.4 | Yhirose Cpp-Httplib | CWE-200 Information Exposure | 0.4% | Mar 27, 2026 |
| CVE-2026-4712 Mozilla Firefox | HIGH7.5 | Mozilla Firefox | CWE-200 Information Exposure | 0.4% | Mar 24, 2026 |
Page 1 of 2
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications