2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
38 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-70200 Microsoft Azure Logic Apps | CRITICAL10.0 | Microsoft Azure Logic Apps | CWE-22 Path Traversal | 0.6% | Sep 17, 2026 |
| CVE-2026-18175 Ibm I | HIGH8.1 | Ibm I | CWE-285 Improper Authorization | 0.2% | Sep 4, 2026 |
| CVE-2026-16925 Ibm Vios | HIGH7.1 | Ibm Vios | CWE-285 Improper Authorization | 0.1% | Aug 20, 2026 |
| CVE-2026-21584 Atlassian Bamboo | HIGH7.6 | Atlassian Bamboo | CWE-285 Improper Authorization | 0.3% | Aug 18, 2026 |
| CVE-2026-18509 Ibm I | HIGH8.2 | Ibm I | CWE-285 Improper Authorization | 0.2% | Aug 13, 2026 |
| CVE-2026-10543 Ibm Db2 | HIGH8.2 | Ibm Db2 | CWE-285 Improper Authorization | 0.4% | Aug 12, 2026 |
| CVE-2026-70472 Flowiseai Flowise | HIGH7.1 | Flowiseai Flowise | CWE-285 Improper Authorization | 0.5% | Aug 4, 2026 |
| CVE-2026-64642 Vercel Next.Js | HIGH8.3 | Vercel Next.Js | CWE-285 Improper Authorization | 0.6% | Jul 27, 2026 |
| CVE-2026-62835 Microsoft Azure Portal | CRITICAL9.3 | Microsoft Azure Portal | CWE-285 Improper Authorization | 1.0% | Jul 24, 2026 |
| CVE-2026-56160 Microsoft Azure Red Hat Openshift | CRITICAL9.1 | Microsoft Azure Red Hat Openshift | CWE-285 Improper Authorization | 0.8% | Jul 24, 2026 |
| CVE-2026-57983 Microsoft Edge Chromium | HIGH8.7 | Microsoft Edge Chromium | CWE-285 Improper Authorization | 0.6% | Jul 3, 2026 |
| CVE-2026-7663 Langflow | CRITICAL9.1 | Langflow | CWE-285 Improper Authorization | 0.5% | Jun 30, 2026 |
| CVE-2026-47342 Apache Ofbiz | HIGH8.8 | Apache Ofbiz | CWE-285 Improper Authorization | 0.6% | Jun 10, 2026 |
| CVE-2026-48579 Microsoft Exchange Online | CRITICAL9.1 | Microsoft Exchange Online | CWE-285 Improper Authorization | 1.0% | Jun 4, 2026 |
| CVE-2026-0072 Google Android Xr | CRITICAL10.0 | Google Android Xr | CWE-285 Improper Authorization | 0.1% | Jun 1, 2026 |
| CVE-2026-43983 Pocket-Id Pocket Id | HIGH8.5 | Pocket-Id Pocket Id | CWE-285 Improper Authorization | 0.4% | May 12, 2026 |
| CVE-2026-5781 Agilonhealth Minerva | HIGH8.5 | Agilonhealth Minerva | CWE-285 Improper Authorization | 0.4% | Apr 28, 2026 |
| CVE-2026-40248 Free5gc | HIGH8.7 | Free5gc | CWE-285 Improper Authorization | 0.5% | Apr 16, 2026 |
| CVE-2026-40247 Free5gc | HIGH8.7 | Free5gc | CWE-285 Improper Authorization | 0.5% | Apr 16, 2026 |
| CVE-2026-40246 Free5gc | HIGH8.7 | Free5gc | CWE-285 Improper Authorization | 0.4% | Apr 16, 2026 |
| CVE-2026-33105 Microsoft Azure Kubernetes Service | CRITICAL10.0 | Microsoft Azure Kubernetes Service | CWE-285 Improper Authorization | 0.9% | Apr 3, 2026 |
| CVE-2026-32213 Microsoft Azure Ai Foundry | CRITICAL10.0 | Microsoft Azure Ai Foundry | CWE-285 Improper Authorization | 0.9% | Apr 3, 2026 |
| CVE-2026-34222 Openwebui Open Webui | HIGH7.7 | Openwebui Open Webui | CWE-285 Improper Authorization | 0.5% | Apr 1, 2026 |
| CVE-2026-34784 Parseplatform Parse-Server | HIGH8.2 | Parseplatform Parse-Server | CWE-285 Improper Authorization | 0.5% | Mar 31, 2026 |
| CVE-2026-33735 Franklioxygen Mytube | HIGH7.4 | Franklioxygen Mytube | CWE-285 Improper Authorization | 0.6% | Mar 27, 2026 |
| CVE-2026-33668 Vikunja | HIGH7.1 | Vikunja | CWE-285 Improper Authorization | 0.6% | Mar 24, 2026 |
| CVE-2026-33125 Frigate | HIGH7.1 | Frigate | CWE-285 Improper Authorization | 0.4% | Mar 20, 2026 |
| CVE-2026-28806 Nerves-Hub Nerveshub | CRITICAL9.4 | Nerves-Hub Nerveshub | CWE-285 Improper Authorization | 0.6% | Mar 10, 2026 |
| CVE-2026-28431 Misskey | CRITICAL9.2 | Misskey | CWE-285 Improper Authorization | 0.4% | Mar 10, 2026 |
| CVE-2026-30793 Rustdesk | CRITICAL9.3 | Rustdesk | CWE-285 Improper Authorization | 0.4% | Mar 5, 2026 |
| CVE-2026-0017 Google Android | HIGH7.7 | Google Android | CWE-285 Improper Authorization | 0.1% | Mar 2, 2026 |
| CVE-2026-26020 Agpt Autogpt Platform | CRITICAL9.4 | Agpt Autogpt Platform | CWE-285 Improper Authorization | 1.0% | Feb 12, 2026 |
| CVE-2026-25893 Frangoteam Fuxa | CRITICAL10.0 | Frangoteam Fuxa | CWE-285 Improper Authorization | 1.2% | Feb 9, 2026 |
| CVE-2026-25885 Polarlearn | CRITICAL10.0 | Polarlearn | CWE-285 Improper Authorization | 0.5% | Feb 9, 2026 |
| CVE-2026-24835 Linuxfoundation Podman Desktop | HIGH8.8 | Linuxfoundation Podman Desktop | CWE-285 Improper Authorization | 0.3% | Jan 28, 2026 |
| CVE-2026-24305 Microsoft Entra Id | CRITICAL9.3 | Microsoft Entra Id | CWE-285 Improper Authorization | 0.5% | Jan 22, 2026 |
| CVE-2026-22252 Librechat | CRITICAL9.1 | Librechat | CWE-285 Improper Authorization | 4.2% | Jan 12, 2026 |
| CVE-2025-61781 Citeum Opencti | HIGH7.1 | Citeum Opencti | CWE-285 Improper Authorization | 0.2% | Jan 5, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications