2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
8 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-92414 Apache Jackrabbit | CRITICAL9.3 | Apache Jackrabbit | CWE-384 | 0.7% | Oct 7, 2026 |
| CVE-2026-102489 Exploited Zammad GmbH Zammad | CRITICAL9.4 | Zammad GmbH Zammad | CWE-384 | 1.3% | Sep 30, 2026 |
| CVE-2026-56425 Misp-Project Misp | CRITICAL9.3 | Misp-Project Misp | CWE-384 | 0.5% | Jun 22, 2026 |
| CVE-2026-30808 Artica Pandora Fms | HIGH7.6 | Artica Pandora Fms | CWE-384 | 0.4% | May 12, 2026 |
| CVE-2026-40010 Apache Wicket | CRITICAL9.1 | Apache Wicket | CWE-384 | 0.6% | May 6, 2026 |
| CVE-2026-31940 Chamilo Lms | HIGH7.5 | Chamilo Lms | CWE-384 | 0.5% | Apr 10, 2026 |
| CVE-2026-33757 Openbao | CRITICAL9.6 | Openbao | CWE-384 | 0.6% | Mar 27, 2026 |
| CVE-2026-24894 Php Frankenphp | HIGH8.7 | Php Frankenphp | CWE-269 Improper Privilege Management | 0.4% | Feb 12, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications