2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
71 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-110633 the affected product | HIGH8.5 | the affected product | CWE-269 Improper Privilege Management | n/a | Oct 14, 2026 |
| CVE-2026-104748 the affected product | CRITICAL9.8 | the affected product | CWE-269 Improper Privilege Management | 0.6% | Oct 14, 2026 |
| CVE-2026-104767 the affected product | HIGH7.5 | the affected product | CWE-269 Improper Privilege Management | 0.3% | Oct 14, 2026 |
| CVE-2026-109567 the affected product | HIGH8.6 | the affected product | CWE-269 Improper Privilege Management | 0.3% | Oct 12, 2026 |
| CVE-2026-94578 Broadcom Fabric Operating System | HIGH7.5 | Broadcom Fabric Operating System | CWE-269 Improper Privilege Management | 0.2% | Oct 8, 2026 |
| CVE-2026-102490 Exploited Zammad GmbH Zammad | CRITICAL9.4 | Zammad GmbH Zammad | CWE-269 Improper Privilege Management | 0.5% | Sep 30, 2026 |
| CVE-2026-17645 Ibm Financial Transaction Manager | CRITICAL9.1 | Ibm Financial Transaction Manager | CWE-269 Improper Privilege Management | 0.3% | Sep 22, 2026 |
| CVE-2026-28659 Google Android Xr | CRITICAL10.0 | Google Android Xr | CWE-269 Improper Privilege Management | 0.2% | Sep 8, 2026 |
| CVE-2026-12878 Octopus Codefresh | HIGH8.6 | Octopus Codefresh | CWE-269 Improper Privilege Management | 0.3% | Aug 25, 2026 |
| CVE-2026-16923 Ibm Vios | HIGH7.0 | Ibm Vios | CWE-269 Improper Privilege Management | 0.1% | Aug 20, 2026 |
| CVE-2026-76259 Splunk | HIGH8.8 | Splunk | CWE-269 Improper Privilege Management | 0.2% | Aug 19, 2026 |
| CVE-2026-63700 Dell Wyse Management Suite | HIGH7.8 | Dell Wyse Management Suite | CWE-269 Improper Privilege Management | 0.1% | Aug 14, 2026 |
| CVE-2026-72830 the affected product | HIGH8.7 | the affected product | CWE-269 Improper Privilege Management | 0.7% | Aug 14, 2026 |
| CVE-2026-72829 the affected product | HIGH8.7 | the affected product | CWE-269 Improper Privilege Management | 0.5% | Aug 14, 2026 |
| CVE-2026-18249 Ibm I | HIGH8.4 | Ibm I | CWE-269 Improper Privilege Management | 0.4% | Aug 13, 2026 |
| CVE-2026-18193 Ibm I | HIGH8.9 | Ibm I | CWE-269 Improper Privilege Management | 0.5% | Aug 13, 2026 |
| CVE-2026-18713 Ibm I | HIGH8.8 | Ibm I | CWE-269 Improper Privilege Management | 0.5% | Aug 12, 2026 |
| CVE-2026-17276 Ibm I | CRITICAL9.6 | Ibm I | CWE-269 Improper Privilege Management | 0.5% | Aug 12, 2026 |
| CVE-2026-16904 Ibm I | HIGH8.1 | Ibm I | CWE-269 Improper Privilege Management | 0.5% | Aug 12, 2026 |
| CVE-2026-68821 Microsoft App Installer | HIGH7.3 | Microsoft App Installer | CWE-269 Improper Privilege Management | 0.3% | Aug 11, 2026 |
| CVE-2026-20890 Intel Proset/Wireless Wifi | HIGH7.1 | Intel Proset/Wireless Wifi | CWE-269 Improper Privilege Management | 0.1% | Aug 11, 2026 |
| CVE-2026-18606 the affected product | HIGH7.1 | the affected product | CWE-266 | 0.2% | Aug 3, 2026 |
| CVE-2026-14980 Ibm Websphere Application Server | HIGH8.3 | Ibm Websphere Application Server | CWE-269 Improper Privilege Management | 0.4% | Jul 30, 2026 |
| CVE-2026-65595 N8n | HIGH8.9 | N8n | CWE-269 Improper Privilege Management | 0.7% | Jul 22, 2026 |
| CVE-2026-62515 Oracle E-Business Suite | HIGH7.6 | Oracle E-Business Suite | CWE-269 Improper Privilege Management | 0.3% | Jul 21, 2026 |
| CVE-2026-47870 Broadcom Vmware Avi Load Balancer | HIGH7.1 | Broadcom Vmware Avi Load Balancer | CWE-269 Improper Privilege Management | 0.4% | Jul 18, 2026 |
| CVE-2026-59245 Apache-Airflow-Providers-Fab | HIGH8.1 | Apache-Airflow-Providers-Fab | CWE-269 Improper Privilege Management | 0.6% | Jul 13, 2026 |
| CVE-2026-44787 Discourse | HIGH8.2 | Discourse | CWE-269 Improper Privilege Management | 0.7% | Jul 9, 2026 |
| CVE-2026-46680 Linuxfoundation Containerd | HIGH7.3 | Linuxfoundation Containerd | CWE-269 Improper Privilege Management | 0.2% | Jul 1, 2026 |
| CVE-2026-14101 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-269 Improper Privilege Management | 0.3% | Jun 30, 2026 |
| CVE-2026-12165 the affected product | HIGH8.8 | the affected product | CWE-269 Improper Privilege Management | 0.4% | Jun 17, 2026 |
| CVE-2026-0063 Google Android | CRITICAL10.0 | Google Android | CWE-269 Improper Privilege Management | 0.2% | Jun 17, 2026 |
| CVE-2026-45176 Paloaltonetworks Idira Endpoint Privilege Manager | HIGH8.9 | Paloaltonetworks Idira Endpoint Privilege Manager | CWE-269 Improper Privilege Management | 0.2% | Jun 11, 2026 |
| CVE-2026-49189 Acer Connect M6e 5g Firmware | HIGH8.5 | Acer Connect M6e 5g Firmware | CWE-269 Improper Privilege Management | 0.1% | Jun 4, 2026 |
| CVE-2026-32323 Mullvad Vpn | HIGH7.3 | Mullvad Vpn | CWE-269 Improper Privilege Management | 0.1% | May 19, 2026 |
| CVE-2026-44470 Anthropic Claude Desktop | HIGH8.5 | Anthropic Claude Desktop | CWE-59 | 0.2% | May 13, 2026 |
| CVE-2026-42844 Getgrav Grav | HIGH8.7 | Getgrav Grav | CWE-269 Improper Privilege Management | 0.5% | May 12, 2026 |
| CVE-2026-44224 Requarks Wiki.Js | HIGH8.6 | Requarks Wiki.Js | CWE-269 Improper Privilege Management | 0.6% | May 12, 2026 |
| CVE-2026-33821 Microsoft Dynamics 365 Customer Insights | HIGH7.7 | Microsoft Dynamics 365 Customer Insights | CWE-269 Improper Privilege Management | 0.8% | May 12, 2026 |
| CVE-2026-8069 Acer Nitrosense | HIGH8.5 | Acer Nitrosense | CWE-22 Path Traversal | 0.2% | May 8, 2026 |
| CVE-2026-6389 Ibm Turbonomic Prometurbo Agent | HIGH8.8 | Ibm Turbonomic Prometurbo Agent | CWE-269 Improper Privilege Management | 0.1% | Apr 30, 2026 |
| CVE-2026-41359 Openclaw | HIGH7.1 | Openclaw | CWE-269 Improper Privilege Management | 0.4% | Apr 23, 2026 |
| CVE-2026-35607 Filebrowser | HIGH8.1 | Filebrowser | CWE-269 Improper Privilege Management | 0.6% | Apr 7, 2026 |
| CVE-2026-5373 Runzero Platform | HIGH8.1 | Runzero Platform | CWE-269 Improper Privilege Management | 0.4% | Apr 7, 2026 |
| CVE-2026-34528 Filebrowser | HIGH8.1 | Filebrowser | CWE-269 Improper Privilege Management | 0.7% | Apr 1, 2026 |
| CVE-2025-70887 Ralphje Signify | HIGH8.8 | Ralphje Signify | CWE-269 Improper Privilege Management | 0.3% | Mar 25, 2026 |
| CVE-2026-33509 Pyload | HIGH7.5 | Pyload | CWE-269 Improper Privilege Management | 0.6% | Mar 24, 2026 |
| CVE-2026-32760 Filebrowser | CRITICAL10.0 | Filebrowser | CWE-269 Improper Privilege Management | 0.7% | Mar 20, 2026 |
| CVE-2026-25770 Wazuh | CRITICAL9.1 | Wazuh | CWE-22 Path Traversal | 1.0% | Mar 17, 2026 |
| CVE-2026-31852 Jellyfin | CRITICAL10.0 | Jellyfin | CWE-269 Improper Privilege Management | 0.6% | Mar 11, 2026 |
Page 1 of 2
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications