2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
251 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-106634 the affected product | HIGH7.7 | the affected product | CWE-22 Path Traversal | 0.5% | Oct 13, 2026 |
| CVE-2026-109956 the affected product | HIGH8.3 | the affected product | CWE-22 Path Traversal | 0.3% | Oct 13, 2026 |
| CVE-2026-85114 the affected product | HIGH8.7 | the affected product | CWE-22 Path Traversal | 0.4% | Oct 13, 2026 |
| CVE-2026-82110 Ibm Datastage On Cloud Pak For Data | CRITICAL9.6 | Ibm Datastage On Cloud Pak For Data | CWE-22 Path Traversal | 0.5% | Oct 12, 2026 |
| CVE-2026-82101 Ibm Datastage On Cloud Pak For Data | CRITICAL9.6 | Ibm Datastage On Cloud Pak For Data | CWE-22 Path Traversal | 0.4% | Oct 12, 2026 |
| CVE-2026-82900 Ibm Guardium Data Protection | HIGH8.1 | Ibm Guardium Data Protection | CWE-22 Path Traversal | 0.4% | Oct 8, 2026 |
| CVE-2026-84275 Ibm Guardium Data Protection | HIGH7.5 | Ibm Guardium Data Protection | CWE-22 Path Traversal | 0.3% | Oct 8, 2026 |
| CVE-2026-85490 Broadcom Brocade Active Support Connectivity Gateway | HIGH7.7 | Broadcom Brocade Active Support Connectivity Gateway | CWE-22 Path Traversal | 0.3% | Oct 8, 2026 |
| CVE-2026-85487 Broadcom Brocade Active Support Connectivity Gateway | HIGH8.6 | Broadcom Brocade Active Support Connectivity Gateway | CWE-22 Path Traversal | 0.2% | Oct 8, 2026 |
| CVE-2026-71168 Dell System Update | HIGH7.3 | Dell System Update | CWE-22 Path Traversal | 0.2% | Oct 6, 2026 |
| CVE-2026-105744 Docling | HIGH7.5 | Docling | CWE-22 Path Traversal | 0.3% | Oct 5, 2026 |
| CVE-2026-101885 the affected product | HIGH8.5 | the affected product | CWE-22 Path Traversal | 0.2% | Sep 30, 2026 |
| CVE-2026-86136 Watchguard Fireware | HIGH7.1 | Watchguard Fireware | CWE-22 Path Traversal | 0.3% | Sep 30, 2026 |
| CVE-2026-102424 Balbooa Forms | HIGH8.9 | Balbooa Forms | CWE-22 Path Traversal | 0.4% | Sep 29, 2026 |
| CVE-2026-82094 Ibm Datastage On Cloud Pak For Data | HIGH7.1 | Ibm Datastage On Cloud Pak For Data | CWE-22 Path Traversal | 0.3% | Sep 24, 2026 |
| CVE-2026-77246 Mcp-Atlassian Mcp Atlassian | HIGH7.4 | Mcp-Atlassian Mcp Atlassian | CWE-22 Path Traversal | 0.4% | Sep 22, 2026 |
| CVE-2026-77271 Mcp-Atlassian Mcp Atlassian | HIGH8.3 | Mcp-Atlassian Mcp Atlassian | CWE-22 Path Traversal | 0.5% | Sep 22, 2026 |
| CVE-2026-77260 Mcp-Atlassian Mcp Atlassian | HIGH8.3 | Mcp-Atlassian Mcp Atlassian | CWE-22 Path Traversal | 0.3% | Sep 22, 2026 |
| CVE-2017-20284 the affected product | HIGH8.7 | the affected product | CWE-22 Path Traversal | 1.0% | Sep 18, 2026 |
| CVE-2026-70200 Microsoft Azure Logic Apps | CRITICAL10.0 | Microsoft Azure Logic Apps | CWE-22 Path Traversal | 0.6% | Sep 17, 2026 |
| CVE-2026-70009 Microsoft Azure Arc | CRITICAL9.3 | Microsoft Azure Arc | CWE-22 Path Traversal | 0.5% | Sep 17, 2026 |
| CVE-2026-93014 the affected product | HIGH7.1 | the affected product | CWE-22 Path Traversal | 0.5% | Sep 17, 2026 |
| CVE-2026-87976 Apache Nifi | HIGH7.2 | Apache Nifi | CWE-22 Path Traversal | 0.8% | Sep 16, 2026 |
| CVE-2026-92604 the affected product | HIGH7.2 | the affected product | CWE-22 Path Traversal | 0.6% | Sep 16, 2026 |
| CVE-2026-91940 the affected product | HIGH8.7 | the affected product | CWE-22 Path Traversal | 0.5% | Sep 15, 2026 |
| CVE-2026-91934 the affected product | HIGH8.7 | the affected product | CWE-22 Path Traversal | 0.7% | Sep 15, 2026 |
| CVE-2026-16335 Ibm Datastage On Cloud Pak For Data | HIGH8.1 | Ibm Datastage On Cloud Pak For Data | CWE-22 Path Traversal | 0.5% | Sep 14, 2026 |
| CVE-2026-82035 the affected product | HIGH7.1 | the affected product | CWE-22 Path Traversal | 0.3% | Sep 14, 2026 |
| CVE-2026-81551 Ibm Datastage On Cloud Pak For Data | HIGH8.8 | Ibm Datastage On Cloud Pak For Data | CWE-22 Path Traversal | 0.6% | Sep 10, 2026 |
| CVE-2026-88937 the affected product | HIGH8.6 | the affected product | CWE-22 Path Traversal | 0.7% | Sep 10, 2026 |
| CVE-2026-9166 the affected product | HIGH7.5 | the affected product | CWE-22 Path Traversal | 0.5% | Sep 10, 2026 |
| CVE-2026-77104 Commvault | HIGH8.3 | Commvault | CWE-22 Path Traversal | 0.6% | Sep 8, 2026 |
| CVE-2026-77091 Commvault | HIGH8.5 | Commvault | CWE-22 Path Traversal | 0.2% | Sep 8, 2026 |
| CVE-2026-80131 Dell Secure Connect Gateway | HIGH7.4 | Dell Secure Connect Gateway | CWE-22 Path Traversal | 0.8% | Sep 7, 2026 |
| CVE-2026-67281 Mikrotik Routeros | HIGH8.7 | Mikrotik Routeros | CWE-22 Path Traversal | 0.7% | Sep 5, 2026 |
| CVE-2026-85396 the affected product | HIGH8.7 | the affected product | CWE-22 Path Traversal | 0.6% | Sep 3, 2026 |
| CVE-2026-10053 Gitlab | HIGH8.5 | Gitlab | CWE-22 Path Traversal | 0.8% | Aug 23, 2026 |
| CVE-2026-77068 N8n | HIGH8.7 | N8n | CWE-22 Path Traversal | 0.9% | Aug 20, 2026 |
| CVE-2026-46343 Wazuh | HIGH7.5 | Wazuh | CWE-22 Path Traversal | 0.4% | Aug 19, 2026 |
| CVE-2026-17181 Ibm Db2 Mirror For I | CRITICAL9.3 | Ibm Db2 Mirror For I | CWE-22 Path Traversal | 0.5% | Aug 14, 2026 |
| CVE-2026-17081 Ibm Db2 Mirror For I | HIGH8.2 | Ibm Db2 Mirror For I | CWE-22 Path Traversal | 0.5% | Aug 14, 2026 |
| CVE-2026-16908 Ibm I | HIGH8.5 | Ibm I | CWE-22 Path Traversal | 0.6% | Aug 13, 2026 |
| CVE-2026-65768 Microsoft Teams | HIGH8.8 | Microsoft Teams | CWE-22 Path Traversal | 0.9% | Aug 11, 2026 |
| CVE-2026-17556 Github Enterprise Server | HIGH8.8 | Github Enterprise Server | CWE-22 Path Traversal | 0.8% | Aug 5, 2026 |
| CVE-2026-8183 Langflow | HIGH7.7 | Langflow | CWE-22 Path Traversal | 0.6% | Aug 5, 2026 |
| CVE-2026-67309 Traefik | HIGH7.8 | Traefik | CWE-22 Path Traversal | 0.7% | Aug 1, 2026 |
| CVE-2026-12942 Langflow | HIGH7.5 | Langflow | CWE-22 Path Traversal | 0.6% | Jul 30, 2026 |
| CVE-2026-6540 Tigera Calico | HIGH7.9 | Tigera Calico | CWE-22 Path Traversal | 0.5% | Jul 30, 2026 |
| CVE-2026-67245 Asustor Data Master | HIGH7.0 | Asustor Data Master | CWE-22 Path Traversal | 0.3% | Jul 30, 2026 |
| CVE-2026-65886 Balbooa Gridbox | CRITICAL9.2 | Balbooa Gridbox | CWE-22 Path Traversal | 0.6% | Jul 29, 2026 |
Page 1 of 6
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications