2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
33 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-94197 the affected product | HIGH8.7 | the affected product | CWE-290 | n/a | Oct 14, 2026 |
| CVE-2026-105863 Payloadcms Payload | CRITICAL9.2 | Payloadcms Payload | CWE-290 | 0.4% | Oct 6, 2026 |
| CVE-2026-100390 the affected product | CRITICAL9.1 | the affected product | CWE-290 | 0.3% | Sep 25, 2026 |
| CVE-2026-77903 Microsoft Dataverse | CRITICAL9.0 | Microsoft Dataverse | CWE-290 | 0.4% | Sep 17, 2026 |
| CVE-2026-77089 Commvault | CRITICAL9.3 | Commvault | CWE-290 | 0.6% | Sep 8, 2026 |
| CVE-2026-14199 Grafana | HIGH7.1 | Grafana | CWE-290 | 0.3% | Sep 2, 2026 |
| CVE-2026-19538 Nlnetlabs Nsd | HIGH8.2 | Nlnetlabs Nsd | CWE-290 | 0.2% | Aug 26, 2026 |
| CVE-2026-45063 Sensiolabs Symfony | CRITICAL9.1 | Sensiolabs Symfony | CWE-290 | 0.4% | Jul 14, 2026 |
| CVE-2026-45074 Sensiolabs Symfony | HIGH7.6 | Sensiolabs Symfony | CWE-290 | 0.5% | Jul 14, 2026 |
| CVE-2026-54763 Traefik | HIGH7.8 | Traefik | CWE-178 | 0.2% | Jul 6, 2026 |
| CVE-2026-49468 Litellm | CRITICAL9.5 | Litellm | CWE-290 | 3.0% | Jun 22, 2026 |
| CVE-2026-39999 Apache Apisix | HIGH7.0 | Apache Apisix | CWE-290 | 0.6% | Jun 19, 2026 |
| CVE-2026-53832 Openclaw | HIGH7.4 | Openclaw | CWE-290 | 0.1% | Jun 12, 2026 |
| CVE-2026-48567 Microsoft Azure Horizondb | CRITICAL10.0 | Microsoft Azure Horizondb | CWE-290 | 0.9% | Jun 4, 2026 |
| CVE-2026-24899 Fleetdm Fleet | HIGH8.2 | Fleetdm Fleet | CWE-290 | 0.4% | May 14, 2026 |
| CVE-2026-42354 Sentry | CRITICAL9.1 | Sentry | CWE-290 | 0.7% | May 8, 2026 |
| CVE-2026-39858 Traefik | HIGH7.8 | Traefik | CWE-290 | 0.6% | Apr 30, 2026 |
| CVE-2026-25660 Ericsson Codechecker | CRITICAL9.3 | Ericsson Codechecker | CWE-290 | 0.6% | Apr 24, 2026 |
| CVE-2026-33654 Nanobot | HIGH8.9 | Nanobot | CWE-94 Code Injection | 0.7% | Mar 27, 2026 |
| CVE-2026-33661 Yansongda Pay | HIGH8.6 | Yansongda Pay | CWE-290 | 0.7% | Mar 26, 2026 |
| CVE-2026-30975 Sonarr | HIGH8.1 | Sonarr | CWE-290 | 0.6% | Mar 25, 2026 |
| CVE-2025-59707 N2ws N2w | CRITICAL9.8 | N2ws N2w | CWE-290 | 0.5% | Mar 25, 2026 |
| CVE-2025-59706 N2ws N2w | CRITICAL9.8 | N2ws N2w | CWE-290 | 0.5% | Mar 25, 2026 |
| CVE-2026-32045 Openclaw | HIGH8.2 | Openclaw | CWE-290 | 0.6% | Mar 21, 2026 |
| CVE-2026-33131 H3 | HIGH7.4 | H3 | CWE-290 | 0.4% | Mar 20, 2026 |
| CVE-2026-28465 Openclaw | HIGH8.2 | Openclaw | CWE-290 | 0.7% | Mar 5, 2026 |
| CVE-2026-27700 Hono | HIGH8.2 | Hono | CWE-290 | 0.4% | Feb 25, 2026 |
| CVE-2026-2800 Mozilla Firefox | CRITICAL9.8 | Mozilla Firefox | CWE-290 | 0.6% | Feb 24, 2026 |
| CVE-2024-1524 Wso2 Api Manager | HIGH7.7 | Wso2 Api Manager | CWE-290 | 0.3% | Feb 24, 2026 |
| CVE-2026-24853 Caido | HIGH8.1 | Caido | CWE-290 | 0.3% | Feb 13, 2026 |
| CVE-2026-25938 Frangoteam Fuxa | CRITICAL9.5 | Frangoteam Fuxa | CWE-290 | 1.5% | Feb 9, 2026 |
| CVE-2026-21862 Rustfs | HIGH7.7 | Rustfs | CWE-290 | 0.2% | Feb 3, 2026 |
| CVE-2026-0834 Tp-Link Archer Ax53 Firmware | HIGH7.2 | Tp-Link Archer Ax53 Firmware | CWE-290 | 0.4% | Jan 21, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications