2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
137 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-110838 the affected product | HIGH8.7 | the affected product | CWE-306 Missing Authentication | n/a | Oct 14, 2026 |
| CVE-2026-109439 the affected product | CRITICAL9.3 | the affected product | CWE-306 Missing Authentication | n/a | Oct 14, 2026 |
| CVE-2026-110618 the affected product | HIGH8.6 | the affected product | CWE-306 Missing Authentication | n/a | Oct 14, 2026 |
| CVE-2026-110616 the affected product | CRITICAL9.2 | the affected product | CWE-306 Missing Authentication | n/a | Oct 14, 2026 |
| CVE-2026-70580 the affected product | HIGH8.8 | the affected product | CWE-306 Missing Authentication | 0.3% | Oct 13, 2026 |
| CVE-2026-110128 the affected product | HIGH8.7 | the affected product | CWE-306 Missing Authentication | 0.4% | Oct 13, 2026 |
| CVE-2026-85489 Broadcom Brocade Active Support Connectivity Gateway | HIGH8.7 | Broadcom Brocade Active Support Connectivity Gateway | CWE-306 Missing Authentication | 0.2% | Oct 8, 2026 |
| CVE-2026-85423 Broadcom Brocade Active Support Connectivity Gateway | HIGH8.6 | Broadcom Brocade Active Support Connectivity Gateway | CWE-306 Missing Authentication | 0.2% | Oct 8, 2026 |
| CVE-2026-85421 Broadcom Brocade Active Support Connectivity Gateway | HIGH8.7 | Broadcom Brocade Active Support Connectivity Gateway | CWE-306 Missing Authentication | 0.2% | Oct 8, 2026 |
| CVE-2026-87664 Broadcom Fabric Operating System | HIGH8.5 | Broadcom Fabric Operating System | CWE-306 Missing Authentication | 0.1% | Oct 8, 2026 |
| CVE-2026-87659 Broadcom Fabric Operating System | HIGH7.1 | Broadcom Fabric Operating System | CWE-306 Missing Authentication | 0.2% | Oct 8, 2026 |
| CVE-2026-102811 the affected product | HIGH8.7 | the affected product | CWE-306 Missing Authentication | 0.7% | Sep 29, 2026 |
| CVE-2026-101077 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | 0.7% | Sep 28, 2026 |
| CVE-2026-65114 Nvidia Infra Controller | HIGH8.3 | Nvidia Infra Controller | CWE-306 Missing Authentication | 0.4% | Sep 22, 2026 |
| CVE-2026-85889 Microsoft Azure Ai Foundry | CRITICAL10.0 | Microsoft Azure Ai Foundry | CWE-306 Missing Authentication | 0.7% | Sep 17, 2026 |
| CVE-2026-81475 Dell Openmanage Server Administrator | HIGH8.1 | Dell Openmanage Server Administrator | CWE-306 Missing Authentication | 0.5% | Sep 17, 2026 |
| CVE-2026-87197 Oracle Hyperion Financial Management | HIGH8.2 | Oracle Hyperion Financial Management | CWE-306 Missing Authentication | 0.4% | Sep 15, 2026 |
| CVE-2026-81238 Dell Wyse Management Suite | HIGH7.5 | Dell Wyse Management Suite | CWE-306 Missing Authentication | 0.3% | Sep 15, 2026 |
| CVE-2026-86728 the affected product | HIGH8.7 | the affected product | CWE-306 Missing Authentication | 0.6% | Sep 8, 2026 |
| CVE-2026-77097 Commvault | HIGH8.8 | Commvault | CWE-306 Missing Authentication | 0.5% | Sep 8, 2026 |
| CVE-2026-67277 Exploited MikroTik RouterOS | HIGH8.8 | MikroTik RouterOS | CWE-306 Missing Authentication | 1.6% | Sep 5, 2026 |
| CVE-2026-85695 the affected product | CRITICAL9.3 | the affected product | CWE-306 Missing Authentication | 0.7% | Sep 4, 2026 |
| CVE-2026-79687 Dell Powerstoreos | CRITICAL9.0 | Dell Powerstoreos | CWE-306 Missing Authentication | 0.3% | Sep 1, 2026 |
| CVE-2026-72822 the affected product | HIGH8.7 | the affected product | CWE-306 Missing Authentication | 0.6% | Aug 14, 2026 |
| CVE-2026-67610 the affected product | HIGH8.6 | the affected product | CWE-306 Missing Authentication | 0.5% | Aug 3, 2026 |
| CVE-2026-41452 the affected product | CRITICAL9.3 | the affected product | CWE-306 Missing Authentication | 3.7% | Aug 3, 2026 |
| CVE-2026-67208 the affected product | CRITICAL9.3 | the affected product | CWE-306 Missing Authentication | 4.3% | Jul 30, 2026 |
| CVE-2026-14529 Ibm Websphere Application Server | CRITICAL9.4 | Ibm Websphere Application Server | CWE-306 Missing Authentication | 0.5% | Jul 29, 2026 |
| CVE-2026-14976 Ibm Websphere Application Server | HIGH7.1 | Ibm Websphere Application Server | CWE-306 Missing Authentication | 0.6% | Jul 28, 2026 |
| CVE-2026-55626 Neutrinolabs Xrdp | HIGH8.0 | Neutrinolabs Xrdp | CWE-287 Improper Authentication | 0.2% | Jul 20, 2026 |
| CVE-2026-46555 Verygoodplugins Whatsapp Mcp Server | HIGH7.7 | Verygoodplugins Whatsapp Mcp Server | CWE-22 Path Traversal | 0.2% | Jul 20, 2026 |
| CVE-2026-12691 the affected product | HIGH7.5 | the affected product | CWE-306 Missing Authentication | 0.5% | Jul 17, 2026 |
| CVE-2026-53512 Better-Auth Better Auth | CRITICAL9.1 | Better-Auth Better Auth | CWE-287 Improper Authentication | 0.3% | Jul 15, 2026 |
| CVE-2026-50451 Microsoft Windows 10 1607 | HIGH7.1 | Microsoft Windows 10 1607 | CWE-306 Missing Authentication | 0.3% | Jul 14, 2026 |
| CVE-2026-62422 Jetbrains Youtrack | CRITICAL10.0 | Jetbrains Youtrack | CWE-306 Missing Authentication | 0.6% | Jul 14, 2026 |
| CVE-2026-58319 Apache Doris | CRITICAL9.1 | Apache Doris | CWE-306 Missing Authentication | 0.7% | Jul 14, 2026 |
| CVE-2026-59822 Exploited BerriAI LiteLLM | HIGH8.8 | BerriAI LiteLLM | CWE-287 Improper Authentication | 0.8% | Jul 8, 2026 |
| CVE-2026-12490 Nlnetlabs Nsd | HIGH8.2 | Nlnetlabs Nsd | CWE-284 Improper Access Control | 0.2% | Jun 25, 2026 |
| CVE-2026-56270 Flowiseai Flowise | HIGH8.7 | Flowiseai Flowise | CWE-306 Missing Authentication | 2.0% | Jun 24, 2026 |
| CVE-2026-54309 N8n | HIGH8.8 | N8n | CWE-306 Missing Authentication | 0.5% | Jun 23, 2026 |
| CVE-2026-50242 Jetbrains Hub | CRITICAL10.0 | Jetbrains Hub | CWE-306 Missing Authentication | 0.6% | Jun 19, 2026 |
| CVE-2026-54130 Microsoft 365 Copilot | CRITICAL9.8 | Microsoft 365 Copilot | CWE-306 Missing Authentication | 1.1% | Jun 18, 2026 |
| CVE-2026-35295 Oracle Webcenter Sites | HIGH7.5 | Oracle Webcenter Sites | CWE-306 Missing Authentication | 0.3% | Jun 17, 2026 |
| CVE-2026-50085 Aqara Board Service | HIGH8.6 | Aqara Board Service | CWE-306 Missing Authentication | 0.6% | Jun 12, 2026 |
| CVE-2026-53469 Kebev2v Migration Assessment | CRITICAL9.1 | Kebev2v Migration Assessment | CWE-306 Missing Authentication | 0.5% | Jun 10, 2026 |
| CVE-2026-11420 Altium On-Prem Enterprise Server | CRITICAL10.0 | Altium On-Prem Enterprise Server | CWE-22 Path Traversal | 0.7% | Jun 5, 2026 |
| CVE-2026-50225 Acer Connect M6e 5g Firmware | HIGH8.8 | Acer Connect M6e 5g Firmware | CWE-306 Missing Authentication | 0.4% | Jun 4, 2026 |
| CVE-2026-42074 Gitlawb Openclaude | CRITICAL9.3 | Gitlawb Openclaude | CWE-284 Improper Access Control | 0.7% | Jun 2, 2026 |
| CVE-2026-49195 Acer Predator Connect W6x Firmware | HIGH8.7 | Acer Predator Connect W6x Firmware | CWE-306 Missing Authentication | 0.4% | May 29, 2026 |
| CVE-2026-8697 Tp-Link Archer C64 Firmware | HIGH8.7 | Tp-Link Archer C64 Firmware | CWE-288 Authentication Bypass via Alternate Path | 0.4% | May 28, 2026 |
Page 1 of 3
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications