2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
104 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-93895 the affected product | CRITICAL9.1 | the affected product | CWE-284 Improper Access Control | 0.4% | Oct 13, 2026 |
| CVE-2026-105443 the affected product | HIGH8.2 | the affected product | CWE-284 Improper Access Control | 0.2% | Oct 13, 2026 |
| CVE-2026-105855 Payloadcms Payload | HIGH7.6 | Payloadcms Payload | CWE-284 Improper Access Control | 0.3% | Oct 6, 2026 |
| CVE-2026-105851 Payloadcms Payload | CRITICAL9.3 | Payloadcms Payload | CWE-284 Improper Access Control | 0.3% | Oct 6, 2026 |
| CVE-2026-83944 Microsoft Azure Logic Apps | CRITICAL10.0 | Microsoft Azure Logic Apps | CWE-284 Improper Access Control | 0.4% | Sep 17, 2026 |
| CVE-2026-73750 Hpe Arubaos-Cx | HIGH8.8 | Hpe Arubaos-Cx | CWE-284 Improper Access Control | 0.8% | Sep 1, 2026 |
| CVE-2026-73749 Hpe Arubaos-Cx | CRITICAL9.8 | Hpe Arubaos-Cx | CWE-284 Improper Access Control | 0.8% | Sep 1, 2026 |
| CVE-2026-18664 Nlnetlabs Nsd | HIGH8.2 | Nlnetlabs Nsd | CWE-284 Improper Access Control | 0.3% | Aug 26, 2026 |
| CVE-2026-70894 Oracle Hyperion Data Relationship Management | HIGH7.7 | Oracle Hyperion Data Relationship Management | CWE-284 Improper Access Control | 0.2% | Aug 18, 2026 |
| CVE-2026-70670 Oracle Reports Developer | CRITICAL9.6 | Oracle Reports Developer | CWE-284 Improper Access Control | 0.4% | Aug 18, 2026 |
| CVE-2026-62637 Oracle Reports Developer | CRITICAL9.3 | Oracle Reports Developer | CWE-284 Improper Access Control | 0.4% | Aug 18, 2026 |
| CVE-2026-62613 Oracle Reports Developer | CRITICAL9.3 | Oracle Reports Developer | CWE-284 Improper Access Control | 0.4% | Aug 18, 2026 |
| CVE-2026-73626 the affected product | HIGH7.7 | the affected product | CWE-284 Improper Access Control | 0.4% | Aug 13, 2026 |
| CVE-2026-20898 Intel Xeon 6315p Firmware | HIGH8.5 | Intel Xeon 6315p Firmware | CWE-284 Improper Access Control | 0.1% | Aug 11, 2026 |
| CVE-2026-20789 Intel Proset/Wireless Wifi | HIGH8.4 | Intel Proset/Wireless Wifi | CWE-284 Improper Access Control | 0.1% | Aug 11, 2026 |
| CVE-2026-20741 Intel Proset/Wireless Wifi | HIGH8.3 | Intel Proset/Wireless Wifi | CWE-284 Improper Access Control | 0.1% | Aug 11, 2026 |
| CVE-2026-20716 Intel Xeon 634 Firmware | HIGH7.2 | Intel Xeon 634 Firmware | CWE-284 Improper Access Control | 0.1% | Aug 11, 2026 |
| CVE-2026-70476 Flowiseai Flowise | HIGH8.3 | Flowiseai Flowise | CWE-284 Improper Access Control | 0.5% | Aug 4, 2026 |
| CVE-2026-58043 Nodejs Node.Js | HIGH8.4 | Nodejs Node.Js | CWE-284 Improper Access Control | 0.2% | Jul 30, 2026 |
| CVE-2026-65888 Balbooa Gridbox | CRITICAL10.0 | Balbooa Gridbox | CWE-284 Improper Access Control | 0.5% | Jul 29, 2026 |
| CVE-2026-65887 Balbooa Gridbox | CRITICAL10.0 | Balbooa Gridbox | CWE-284 Improper Access Control | 0.5% | Jul 29, 2026 |
| CVE-2026-65889 Balbooa Gridbox | CRITICAL9.2 | Balbooa Gridbox | CWE-22 Path Traversal | 0.4% | Jul 29, 2026 |
| CVE-2026-65884 Balbooa Gridbox | CRITICAL10.0 | Balbooa Gridbox | CWE-284 Improper Access Control | 0.5% | Jul 29, 2026 |
| CVE-2026-58630 Microsoft Azure App Service For Linux | CRITICAL10.0 | Microsoft Azure App Service For Linux | CWE-284 Improper Access Control | 0.9% | Jul 24, 2026 |
| CVE-2026-35425 Microsoft Azure Api Management | HIGH8.0 | Microsoft Azure Api Management | CWE-284 Improper Access Control | 0.7% | Jul 24, 2026 |
| CVE-2026-62518 Oracle E-Business Suite | HIGH7.6 | Oracle E-Business Suite | CWE-200 Information Exposure | 0.3% | Jul 21, 2026 |
| CVE-2026-62515 Oracle E-Business Suite | HIGH7.6 | Oracle E-Business Suite | CWE-269 Improper Privilege Management | 0.3% | Jul 21, 2026 |
| CVE-2026-61174 Oracle Product Lifecycle Analytics | CRITICAL9.0 | Oracle Product Lifecycle Analytics | CWE-284 Improper Access Control | 0.2% | Jul 21, 2026 |
| CVE-2026-60838 Oracle Price Protection | HIGH7.1 | Oracle Price Protection | CWE-284 Improper Access Control | 0.3% | Jul 21, 2026 |
| CVE-2026-54526 Argoproj Argo Workflows | HIGH8.9 | Argoproj Argo Workflows | CWE-284 Improper Access Control | 0.6% | Jul 16, 2026 |
| CVE-2026-1609 Redhat Build Of Keycloak | HIGH8.1 | Redhat Build Of Keycloak | CWE-284 Improper Access Control | 0.6% | Jul 16, 2026 |
| CVE-2026-58617 Microsoft 365 Copilot | HIGH8.1 | Microsoft 365 Copilot | CWE-284 Improper Access Control | 0.8% | Jul 14, 2026 |
| CVE-2026-55116 Ui Unifi Connect | CRITICAL9.0 | Ui Unifi Connect | CWE-284 Improper Access Control | 0.4% | Jul 2, 2026 |
| CVE-2026-55112 Ui Unifi Dream Machine Pro Firmware | HIGH7.5 | Ui Unifi Dream Machine Pro Firmware | CWE-284 Improper Access Control | 0.4% | Jul 2, 2026 |
| CVE-2026-54408 Ui Unifi Protect | HIGH8.6 | Ui Unifi Protect | CWE-284 Improper Access Control | 0.6% | Jul 2, 2026 |
| CVE-2026-48930 Nodejs Node.Js | CRITICAL9.8 | Nodejs Node.Js | CWE-284 Improper Access Control | 0.3% | Jun 26, 2026 |
| CVE-2026-12490 Nlnetlabs Nsd | HIGH8.2 | Nlnetlabs Nsd | CWE-284 Improper Access Control | 0.2% | Jun 25, 2026 |
| CVE-2026-54305 N8n | HIGH8.9 | N8n | CWE-200 Information Exposure | 0.4% | Jun 23, 2026 |
| CVE-2026-28381 Grafana Snowflake | CRITICAL9.6 | Grafana Snowflake | CWE-284 Improper Access Control | 0.4% | Jun 22, 2026 |
| CVE-2026-48617 Nodejs Node.Js | HIGH8.2 | Nodejs Node.Js | CWE-284 Improper Access Control | 0.3% | Jun 18, 2026 |
| CVE-2026-45178 Paloaltonetworks Idira Secrets Manager | HIGH8.4 | Paloaltonetworks Idira Secrets Manager | CWE-284 Improper Access Control | 0.5% | Jun 11, 2026 |
| CVE-2026-45177 Paloaltonetworks Idira Secrets Manager Edge | CRITICAL9.1 | Paloaltonetworks Idira Secrets Manager Edge | CWE-284 Improper Access Control | 0.7% | Jun 11, 2026 |
| CVE-2026-47907 Adobe Dreamweaver | HIGH8.6 | Adobe Dreamweaver | CWE-284 Improper Access Control | 0.3% | Jun 9, 2026 |
| CVE-2026-46441 Flowiseai Flowise | HIGH7.6 | Flowiseai Flowise | CWE-284 Improper Access Control | 0.4% | Jun 8, 2026 |
| CVE-2026-42863 Flowiseai Flowise | HIGH7.6 | Flowiseai Flowise | CWE-284 Improper Access Control | 0.4% | Jun 8, 2026 |
| CVE-2026-42861 Flowiseai Flowise | HIGH7.6 | Flowiseai Flowise | CWE-284 Improper Access Control | 0.4% | Jun 8, 2026 |
| CVE-2026-48907 Exploited Widget Factory Joomla Content Editor | CRITICAL10.0 | Widget Factory Joomla Content Editor | CWE-284 Improper Access Control | 16.2% | Jun 5, 2026 |
| CVE-2026-42074 Gitlawb Openclaude | CRITICAL9.3 | Gitlawb Openclaude | CWE-284 Improper Access Control | 0.7% | Jun 2, 2026 |
| CVE-2026-46818 Oracle E-Business Suite | HIGH7.4 | Oracle E-Business Suite | CWE-284 Improper Access Control | 0.3% | May 28, 2026 |
| CVE-2026-48906 Tassos Advanced Custom Fields | CRITICAL9.3 | Tassos Advanced Custom Fields | CWE-284 Improper Access Control | 0.4% | May 27, 2026 |
Page 1 of 3
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications