2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
33 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-95633 the affected product | HIGH7.5 | the affected product | CWE-347 | 0.5% | Oct 13, 2026 |
| CVE-2026-14999 Ibm Datapower Gateway | HIGH7.4 | Ibm Datapower Gateway | CWE-347 | 0.2% | Oct 8, 2026 |
| CVE-2026-102266 Pyjwt Project Pyjwt | HIGH7.4 | Pyjwt Project Pyjwt | CWE-347 | 0.2% | Sep 28, 2026 |
| CVE-2026-18152 Ibm Financial Transaction Manager | HIGH7.4 | Ibm Financial Transaction Manager | CWE-347 | 0.2% | Sep 22, 2026 |
| CVE-2026-89043 the affected product | CRITICAL9.1 | the affected product | CWE-347 | 0.3% | Sep 10, 2026 |
| CVE-2026-77105 Commvault | HIGH8.7 | Commvault | CWE-347 | 0.3% | Sep 8, 2026 |
| CVE-2026-67276 Mikrotik Routeros | CRITICAL9.2 | Mikrotik Routeros | CWE-347 | 6.5% | Sep 5, 2026 |
| CVE-2026-80098 Microsoft Copilot Studio | CRITICAL9.3 | Microsoft Copilot Studio | CWE-347 | 0.5% | Sep 3, 2026 |
| CVE-2026-62834 Microsoft Azure Data Factory | CRITICAL9.3 | Microsoft Azure Data Factory | CWE-347 | 0.5% | Aug 20, 2026 |
| CVE-2026-16443 Redhat Build Of Keycloak | HIGH7.4 | Redhat Build Of Keycloak | CWE-347 | 0.3% | Aug 5, 2026 |
| CVE-2026-59643 Bouncycastle Bc-Java | HIGH8.7 | Bouncycastle Bc-Java | CWE-347 | 0.2% | Aug 3, 2026 |
| CVE-2026-59639 Bouncycastle Bc-Java | HIGH8.7 | Bouncycastle Bc-Java | CWE-347 | 0.2% | Aug 3, 2026 |
| CVE-2026-55735 Ueberauth Guardian | HIGH8.2 | Ueberauth Guardian | CWE-347 | 0.5% | Aug 1, 2026 |
| CVE-2026-47304 Microsoft .Net Framework | HIGH8.1 | Microsoft .Net Framework | CWE-345 | 0.3% | Jul 14, 2026 |
| CVE-2026-13722 Watchguard Fireware | HIGH8.6 | Watchguard Fireware | CWE-347 | 0.3% | Jul 3, 2026 |
| CVE-2026-55961 Wolfssl | HIGH8.2 | Wolfssl | CWE-347 | 0.1% | Jun 25, 2026 |
| CVE-2026-0265 Paloaltonetworks Pan-Os | HIGH7.2 | Paloaltonetworks Pan-Os | CWE-347 | 1.1% | May 13, 2026 |
| CVE-2026-44497 Zfnd Zebra-Script | CRITICAL9.3 | Zfnd Zebra-Script | CWE-347 | 0.3% | May 8, 2026 |
| CVE-2026-0234 Paloaltonetworks Cortex Xsiam | HIGH7.2 | Paloaltonetworks Cortex Xsiam | CWE-347 | 0.2% | Apr 13, 2026 |
| CVE-2026-5466 Wolfssl | HIGH7.6 | Wolfssl | CWE-347 | 0.2% | Apr 10, 2026 |
| CVE-2026-35205 Helm | HIGH8.4 | Helm | CWE-636 | 0.2% | Apr 9, 2026 |
| CVE-2026-32144 Erlang/Otp | HIGH7.6 | Erlang/Otp | CWE-295 | 0.3% | Apr 7, 2026 |
| CVE-2026-34377 Zfnd Zebra | HIGH8.4 | Zfnd Zebra | CWE-347 | 0.4% | Mar 31, 2026 |
| CVE-2026-33026 Nginxui Nginx Ui | CRITICAL9.4 | Nginxui Nginx Ui | CWE-312 Cleartext Storage of Sensitive Data | 0.2% | Mar 30, 2026 |
| CVE-2026-32974 Openclaw | HIGH8.8 | Openclaw | CWE-347 | 0.4% | Mar 29, 2026 |
| CVE-2026-4600 Kjur Jsrsasign | HIGH8.1 | Kjur Jsrsasign | CWE-347 | 0.3% | Mar 23, 2026 |
| CVE-2026-3562 Philips Hue Bridge V2 Firmware | HIGH8.8 | Philips Hue Bridge V2 Firmware | CWE-347 | 0.3% | Mar 16, 2026 |
| CVE-2026-28432 Misskey | HIGH7.1 | Misskey | CWE-347 | 0.3% | Mar 10, 2026 |
| CVE-2026-28802 Authlib | HIGH7.7 | Authlib | CWE-347 | 0.6% | Mar 6, 2026 |
| CVE-2026-25793 Slack Nebula | HIGH7.6 | Slack Nebula | CWE-347 | 0.2% | Feb 6, 2026 |
| CVE-2026-0750 Verifone Commerce Paybox | HIGH8.7 | Verifone Commerce Paybox | CWE-347 | 0.3% | Jan 28, 2026 |
| CVE-2026-23518 Fleetdm Fleet | CRITICAL9.3 | Fleetdm Fleet | CWE-347 | 0.3% | Jan 21, 2026 |
| CVE-2025-36418 Ibm Applinx | HIGH7.3 | Ibm Applinx | CWE-347 | 0.2% | Jan 20, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications