2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
115 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-110864 the affected product | CRITICAL9.1 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-110863 the affected product | HIGH8.6 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-110862 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-101954 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-108707 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | 0.6% | Oct 11, 2026 |
| CVE-2026-19491 Ibm Security Verify Access | CRITICAL9.1 | Ibm Security Verify Access | CWE-287 Improper Authentication | 0.3% | Oct 8, 2026 |
| CVE-2026-16823 Ibm Security Verify Access | CRITICAL9.1 | Ibm Security Verify Access | CWE-287 Improper Authentication | 0.3% | Oct 8, 2026 |
| CVE-2026-83540 Wolfssh | HIGH7.7 | Wolfssh | CWE-287 Improper Authentication | 0.4% | Oct 7, 2026 |
| CVE-2026-92227 Joomla! | HIGH8.2 | Joomla! | CWE-287 Improper Authentication | 0.3% | Sep 29, 2026 |
| CVE-2026-101077 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | 0.7% | Sep 28, 2026 |
| CVE-2026-97063 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | 0.3% | Sep 25, 2026 |
| CVE-2026-95676 Watchguard Authentication Gateway | HIGH7.4 | Watchguard Authentication Gateway | CWE-287 Improper Authentication | 0.4% | Sep 23, 2026 |
| CVE-2026-18074 Ibm Financial Transaction Manager | HIGH8.2 | Ibm Financial Transaction Manager | CWE-287 Improper Authentication | 0.4% | Sep 22, 2026 |
| CVE-2026-65121 Nvidia Infra Controller | HIGH8.2 | Nvidia Infra Controller | CWE-287 Improper Authentication | 0.4% | Sep 22, 2026 |
| CVE-2025-43936 Dell Objectscale | HIGH8.1 | Dell Objectscale | CWE-287 Improper Authentication | 0.5% | Sep 16, 2026 |
| CVE-2026-88007 Traefik | CRITICAL9.1 | Traefik | CWE-287 Improper Authentication | 0.6% | Sep 10, 2026 |
| CVE-2026-69854 Microsoft Spring Cloud | CRITICAL9.0 | Microsoft Spring Cloud | CWE-287 Improper Authentication | 0.7% | Sep 8, 2026 |
| CVE-2026-86723 the affected product | HIGH8.6 | the affected product | CWE-287 Improper Authentication | 0.5% | Sep 8, 2026 |
| CVE-2026-86426 Librenms | CRITICAL9.2 | Librenms | CWE-287 Improper Authentication | 3.9% | Sep 7, 2026 |
| CVE-2026-18221 Ibm I | HIGH8.1 | Ibm I | CWE-287 Improper Authentication | 0.3% | Sep 4, 2026 |
| CVE-2026-85596 Traefik | HIGH8.2 | Traefik | CWE-287 Improper Authentication | 0.4% | Sep 4, 2026 |
| CVE-2026-85595 Traefik | CRITICAL9.3 | Traefik | CWE-287 Improper Authentication | 0.7% | Sep 4, 2026 |
| CVE-2026-79938 Dell Powerprotect Cyber Recovery | HIGH7.6 | Dell Powerprotect Cyber Recovery | CWE-287 Improper Authentication | 0.5% | Aug 26, 2026 |
| CVE-2026-79787 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | 0.5% | Aug 25, 2026 |
| CVE-2026-17000 Ibm Vios | HIGH8.1 | Ibm Vios | CWE-287 Improper Authentication | 0.4% | Aug 20, 2026 |
| CVE-2026-15315 Tp-Link Tapo C120 Firmware | HIGH8.7 | Tp-Link Tapo C120 Firmware | CWE-287 Improper Authentication | 0.3% | Aug 18, 2026 |
| CVE-2026-73337 Joomla! | HIGH8.2 | Joomla! | CWE-287 Improper Authentication | 0.5% | Aug 18, 2026 |
| CVE-2026-17101 Ibm I | HIGH8.3 | Ibm I | CWE-287 Improper Authentication | 0.6% | Aug 13, 2026 |
| CVE-2026-16867 Ibm I | HIGH8.1 | Ibm I | CWE-287 Improper Authentication | 0.6% | Aug 13, 2026 |
| CVE-2026-17197 Ibm I | HIGH8.1 | Ibm I | CWE-287 Improper Authentication | 0.5% | Aug 13, 2026 |
| CVE-2026-73241 Freerdp | HIGH8.3 | Freerdp | CWE-287 Improper Authentication | 0.5% | Aug 11, 2026 |
| CVE-2026-20885 Intel Tdx Module | HIGH7.0 | Intel Tdx Module | CWE-287 Improper Authentication | 0.1% | Aug 11, 2026 |
| CVE-2026-56793 Dell Openmanage Server Administrator | HIGH7.7 | Dell Openmanage Server Administrator | CWE-287 Improper Authentication | 0.5% | Aug 7, 2026 |
| CVE-2026-70482 Openwebui Open Webui | HIGH8.1 | Openwebui Open Webui | CWE-287 Improper Authentication | 0.6% | Aug 4, 2026 |
| CVE-2026-14541 Google Mcp Toolbox For Databases | HIGH8.0 | Google Mcp Toolbox For Databases | CWE-287 Improper Authentication | 0.3% | Jul 31, 2026 |
| CVE-2026-66014 Jfrog Artifactory | HIGH8.8 | Jfrog Artifactory | CWE-287 Improper Authentication | 0.6% | Jul 27, 2026 |
| CVE-2026-62825 Microsoft Azure Key Vault | CRITICAL10.0 | Microsoft Azure Key Vault | CWE-287 Improper Authentication | 0.9% | Jul 24, 2026 |
| CVE-2026-10697 Progress Moveit Transfer | HIGH7.5 | Progress Moveit Transfer | CWE-287 Improper Authentication | 0.6% | Jul 23, 2026 |
| CVE-2026-16232 Exploited Check Point SmartConsole | CRITICAL9.3 | Check Point SmartConsole | CWE-287 Improper Authentication | 78.0% | Jul 22, 2026 |
| CVE-2026-12341 Sailpoint Identityiq | HIGH8.8 | Sailpoint Identityiq | CWE-287 Improper Authentication | 0.4% | Jul 20, 2026 |
| CVE-2026-55626 Neutrinolabs Xrdp | HIGH8.0 | Neutrinolabs Xrdp | CWE-287 Improper Authentication | 0.2% | Jul 20, 2026 |
| CVE-2026-53512 Better-Auth Better Auth | CRITICAL9.1 | Better-Auth Better Auth | CWE-287 Improper Authentication | 0.3% | Jul 15, 2026 |
| CVE-2026-56169 Microsoft Windows Admin Center | HIGH8.1 | Microsoft Windows Admin Center | CWE-287 Improper Authentication | 0.7% | Jul 14, 2026 |
| CVE-2026-59822 Exploited BerriAI LiteLLM | HIGH8.8 | BerriAI LiteLLM | CWE-287 Improper Authentication | 0.8% | Jul 8, 2026 |
| CVE-2026-40139 Beyondtrust Privileged Remote Access | CRITICAL9.2 | Beyondtrust Privileged Remote Access | CWE-287 Improper Authentication | 0.8% | Jul 6, 2026 |
| CVE-2026-40138 Beyondtrust Privileged Remote Access | CRITICAL9.2 | Beyondtrust Privileged Remote Access | CWE-287 Improper Authentication | 0.5% | Jul 6, 2026 |
| CVE-2026-10560 Langflow | HIGH8.2 | Langflow | CWE-287 Improper Authentication | 0.5% | Jun 30, 2026 |
| CVE-2026-32174 Microsoft Azure Ai Bot Service | HIGH7.7 | Microsoft Azure Ai Bot Service | CWE-287 Improper Authentication | 0.8% | Jun 18, 2026 |
| CVE-2026-11718 Google Mcp Toolbox For Databases | CRITICAL9.3 | Google Mcp Toolbox For Databases | CWE-287 Improper Authentication | 0.2% | Jun 18, 2026 |
| CVE-2026-11717 Google Mcp Toolbox For Databases | CRITICAL9.3 | Google Mcp Toolbox For Databases | CWE-287 Improper Authentication | 0.2% | Jun 18, 2026 |
Page 1 of 3
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications