2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
30 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-94585 Broadcom Fabric Operating System | HIGH7.7 | Broadcom Fabric Operating System | CWE-288 Authentication Bypass via Alternate Path | 0.2% | Oct 8, 2026 |
| CVE-2026-63493 Snipeitapp Snipe-It | HIGH8.6 | Snipeitapp Snipe-It | CWE-288 Authentication Bypass via Alternate Path | 0.3% | Sep 24, 2026 |
| CVE-2026-77103 Commvault | HIGH8.7 | Commvault | CWE-288 Authentication Bypass via Alternate Path | 0.5% | Sep 8, 2026 |
| CVE-2026-62916 Microsoft Entra Id | CRITICAL9.1 | Microsoft Entra Id | CWE-288 Authentication Bypass via Alternate Path | 0.9% | Sep 3, 2026 |
| CVE-2026-19490 Exploited Citrix NetScaler | CRITICAL9.3 | Citrix NetScaler | CWE-288 Authentication Bypass via Alternate Path | 23.2% | Aug 19, 2026 |
| CVE-2026-18577 Exploited N-able N-central | HIGH8.2 | N-able N-central | CWE-288 Authentication Bypass via Alternate Path | 14.6% | Aug 2, 2026 |
| CVE-2026-18556 Exploited N-able N-central | HIGH8.2 | N-able N-central | CWE-288 Authentication Bypass via Alternate Path | 7.9% | Aug 1, 2026 |
| CVE-2026-22049 Netapp Ontap | HIGH8.7 | Netapp Ontap | CWE-288 Authentication Bypass via Alternate Path | 0.5% | Jul 22, 2026 |
| CVE-2026-53622 Traefik | HIGH7.8 | Traefik | CWE-288 Authentication Bypass via Alternate Path | 0.6% | Jun 23, 2026 |
| CVE-2026-48491 Traefik | HIGH7.8 | Traefik | CWE-288 Authentication Bypass via Alternate Path | 0.4% | Jun 23, 2026 |
| CVE-2026-48020 Traefik | HIGH7.8 | Traefik | CWE-288 Authentication Bypass via Alternate Path | 0.8% | Jun 23, 2026 |
| CVE-2026-10523 Ivanti Standalone Sentry | CRITICAL9.9 | Ivanti Standalone Sentry | CWE-288 Authentication Bypass via Alternate Path | 53.1% | Jun 9, 2026 |
| CVE-2025-41273 Waterfall-Security Wf-500 Firmware | CRITICAL9.3 | Waterfall-Security Wf-500 Firmware | CWE-288 Authentication Bypass via Alternate Path | 0.4% | May 29, 2026 |
| CVE-2026-8697 Tp-Link Archer C64 Firmware | HIGH8.7 | Tp-Link Archer C64 Firmware | CWE-288 Authentication Bypass via Alternate Path | 0.4% | May 28, 2026 |
| CVE-2026-33843 Microsoft Entra Id | CRITICAL9.1 | Microsoft Entra Id | CWE-288 Authentication Bypass via Alternate Path | 0.9% | May 22, 2026 |
| CVE-2026-24206 Nvidia Triton Inference Server | HIGH7.3 | Nvidia Triton Inference Server | CWE-288 Authentication Bypass via Alternate Path | 0.6% | May 20, 2026 |
| CVE-2026-31151 Kaleris Yard Management Solutions | CRITICAL9.8 | Kaleris Yard Management Solutions | CWE-288 Authentication Bypass via Alternate Path | 0.6% | Apr 6, 2026 |
| CVE-2026-29139 Seppmail Secure Email Gateway | HIGH7.8 | Seppmail Secure Email Gateway | CWE-288 Authentication Bypass via Alternate Path | 0.5% | Apr 2, 2026 |
| CVE-2026-34040 Docker Engine | HIGH8.8 | Docker Engine | CWE-288 Authentication Bypass via Alternate Path | 0.2% | Mar 31, 2026 |
| CVE-2026-4700 Mozilla Firefox | CRITICAL9.8 | Mozilla Firefox | CWE-288 Authentication Bypass via Alternate Path | 0.5% | Mar 24, 2026 |
| CVE-2026-22733 Vmware Spring Boot | HIGH8.2 | Vmware Spring Boot | CWE-288 Authentication Bypass via Alternate Path | 0.4% | Mar 20, 2026 |
| CVE-2026-22731 Vmware Spring Boot | HIGH8.2 | Vmware Spring Boot | CWE-288 Authentication Bypass via Alternate Path | 0.3% | Mar 19, 2026 |
| CVE-2026-32004 Openclaw | HIGH8.3 | Openclaw | CWE-288 Authentication Bypass via Alternate Path | 0.5% | Mar 19, 2026 |
| CVE-2026-27707 Seerr | HIGH7.3 | Seerr | CWE-288 Authentication Bypass via Alternate Path | 0.7% | Feb 27, 2026 |
| CVE-2026-2791 Mozilla Firefox | CRITICAL9.8 | Mozilla Firefox | CWE-288 Authentication Bypass via Alternate Path | 0.5% | Feb 24, 2026 |
| CVE-2026-2784 Mozilla Firefox | CRITICAL9.8 | Mozilla Firefox | CWE-288 Authentication Bypass via Alternate Path | 0.5% | Feb 24, 2026 |
| CVE-2026-2775 Mozilla Firefox | CRITICAL9.8 | Mozilla Firefox | CWE-288 Authentication Bypass via Alternate Path | 0.6% | Feb 24, 2026 |
| CVE-2026-1603 Exploited Ivanti Endpoint Manager (EPM) | HIGH8.6 | Ivanti Endpoint Manager (EPM) | CWE-288 Authentication Bypass via Alternate Path | 88.3% | Feb 10, 2026 |
| CVE-2026-23760 Exploited SmarterTools SmarterMail | CRITICAL9.3 | SmarterTools SmarterMail | CWE-288 Authentication Bypass via Alternate Path | 96.5% | Jan 22, 2026 |
| CVE-2025-64121 Nuvationenergy Nplatform | CRITICAL10.0 | Nuvationenergy Nplatform | CWE-288 Authentication Bypass via Alternate Path | 0.4% | Jan 2, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications