2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
73 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-105854 Payloadcms Payload | HIGH8.7 | Payloadcms Payload | CWE-400 Uncontrolled Resource Consumption | 0.3% | Oct 6, 2026 |
| CVE-2026-103000 Pypdf Project Pypdf | HIGH8.7 | Pypdf Project Pypdf | CWE-400 Uncontrolled Resource Consumption | 0.3% | Sep 30, 2026 |
| CVE-2026-102999 Pypdf Project Pypdf | HIGH8.7 | Pypdf Project Pypdf | CWE-400 Uncontrolled Resource Consumption | 0.3% | Sep 30, 2026 |
| CVE-2026-102998 Pypdf Project Pypdf | HIGH8.7 | Pypdf Project Pypdf | CWE-400 Uncontrolled Resource Consumption | 0.3% | Sep 30, 2026 |
| CVE-2026-102997 Pypdf Project Pypdf | HIGH8.7 | Pypdf Project Pypdf | CWE-400 Uncontrolled Resource Consumption | 0.3% | Sep 30, 2026 |
| CVE-2026-102996 Pypdf Project Pypdf | HIGH8.7 | Pypdf Project Pypdf | CWE-400 Uncontrolled Resource Consumption | 0.3% | Sep 30, 2026 |
| CVE-2026-102995 Pypdf Project Pypdf | HIGH8.7 | Pypdf Project Pypdf | CWE-400 Uncontrolled Resource Consumption | 0.3% | Sep 30, 2026 |
| CVE-2026-102994 Pypdf Project Pypdf | HIGH8.7 | Pypdf Project Pypdf | CWE-400 Uncontrolled Resource Consumption | 0.3% | Sep 30, 2026 |
| CVE-2026-102993 Pypdf Project Pypdf | HIGH8.7 | Pypdf Project Pypdf | CWE-400 Uncontrolled Resource Consumption | 0.4% | Sep 30, 2026 |
| CVE-2026-90441 Watchguard Fireware | HIGH7.1 | Watchguard Fireware | CWE-200 Information Exposure | 0.2% | Sep 30, 2026 |
| CVE-2026-86104 Watchguard Fireware | HIGH8.7 | Watchguard Fireware | CWE-400 Uncontrolled Resource Consumption | 0.4% | Sep 30, 2026 |
| CVE-2026-86452 Misp-Project Misp | HIGH8.7 | Misp-Project Misp | CWE-400 Uncontrolled Resource Consumption | 0.5% | Sep 7, 2026 |
| CVE-2026-52023 Kamailio | HIGH7.5 | Kamailio | CWE-415 | 0.6% | Sep 1, 2026 |
| CVE-2026-19401 Nlnetlabs Nsd | HIGH8.2 | Nlnetlabs Nsd | CWE-400 Uncontrolled Resource Consumption | 0.3% | Aug 26, 2026 |
| CVE-2026-55685 Shopify React-Router | HIGH8.7 | Shopify React-Router | CWE-400 Uncontrolled Resource Consumption | 0.7% | Jul 27, 2026 |
| CVE-2026-62518 Oracle E-Business Suite | HIGH7.6 | Oracle E-Business Suite | CWE-200 Information Exposure | 0.3% | Jul 21, 2026 |
| CVE-2026-56745 Netty | HIGH8.7 | Netty | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jul 21, 2026 |
| CVE-2026-55851 Netty | HIGH8.7 | Netty | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jul 21, 2026 |
| CVE-2026-58627 Microsoft Windows 10 1607 | HIGH7.5 | Microsoft Windows 10 1607 | CWE-400 Uncontrolled Resource Consumption | 1.2% | Jul 14, 2026 |
| CVE-2026-45756 Sensiolabs Symfony | HIGH8.2 | Sensiolabs Symfony | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jul 14, 2026 |
| CVE-2026-59161 Excelize | HIGH8.7 | Excelize | CWE-400 Uncontrolled Resource Consumption | 0.7% | Jul 10, 2026 |
| CVE-2026-15308 Python | HIGH8.7 | Python | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jul 9, 2026 |
| CVE-2026-59936 Pypdf Project Pypdf | HIGH8.7 | Pypdf Project Pypdf | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jul 8, 2026 |
| CVE-2026-59879 Immutable-Js Immutable | HIGH8.7 | Immutable-Js Immutable | CWE-190 Integer Overflow | 0.7% | Jul 8, 2026 |
| CVE-2026-40140 Beyondtrust Privileged Remote Access | HIGH8.7 | Beyondtrust Privileged Remote Access | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jul 6, 2026 |
| CVE-2026-48619 Nodejs Node.Js | HIGH7.5 | Nodejs Node.Js | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jun 26, 2026 |
| CVE-2026-54268 Angular | HIGH8.2 | Angular | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jun 22, 2026 |
| CVE-2026-48937 Nodejs Node.Js | HIGH7.5 | Nodejs Node.Js | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jun 18, 2026 |
| CVE-2026-50645 Apache Cxf | HIGH7.5 | Apache Cxf | CWE-400 Uncontrolled Resource Consumption | 0.7% | Jun 12, 2026 |
| CVE-2026-45169 Paloaltonetworks Idira Privileged Access Manager Vault | HIGH8.7 | Paloaltonetworks Idira Privileged Access Manager Vault | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jun 12, 2026 |
| CVE-2026-7528 Langflow | HIGH7.1 | Langflow | CWE-400 Uncontrolled Resource Consumption | 0.4% | May 27, 2026 |
| CVE-2026-8856 Ibm Http Server | HIGH7.7 | Ibm Http Server | CWE-400 Uncontrolled Resource Consumption | 0.3% | May 26, 2026 |
| CVE-2026-47077 Benoitc Hackney | HIGH8.2 | Benoitc Hackney | CWE-400 Uncontrolled Resource Consumption | 0.7% | May 25, 2026 |
| CVE-2026-47073 Benoitc Hackney | HIGH8.7 | Benoitc Hackney | CWE-400 Uncontrolled Resource Consumption | 0.8% | May 25, 2026 |
| CVE-2026-47071 Benoitc Hackney | HIGH8.2 | Benoitc Hackney | CWE-400 Uncontrolled Resource Consumption | 0.7% | May 25, 2026 |
| CVE-2026-42579 Netty | HIGH7.5 | Netty | CWE-20 Improper Input Validation | 0.8% | May 13, 2026 |
| CVE-2026-7790 Ninenines Cowlib | HIGH8.7 | Ninenines Cowlib | CWE-400 Uncontrolled Resource Consumption | 0.8% | May 11, 2026 |
| CVE-2025-10470 Wso2 Identity Server | HIGH8.6 | Wso2 Identity Server | CWE-400 Uncontrolled Resource Consumption | 0.3% | May 11, 2026 |
| CVE-2026-38361 Fohrloop Dash-Uploader | HIGH7.5 | Fohrloop Dash-Uploader | CWE-400 Uncontrolled Resource Consumption | 2.8% | May 8, 2026 |
| CVE-2026-32936 Coredns.Io Coredns | HIGH8.7 | Coredns.Io Coredns | CWE-400 Uncontrolled Resource Consumption | 0.6% | May 5, 2026 |
| CVE-2026-41680 Marked Project Marked | HIGH8.7 | Marked Project Marked | CWE-400 Uncontrolled Resource Consumption | 0.5% | Apr 24, 2026 |
| CVE-2026-40481 Monetr | HIGH8.2 | Monetr | CWE-400 Uncontrolled Resource Consumption | 0.6% | Apr 17, 2026 |
| CVE-2026-40192 Python Pillow | HIGH8.7 | Python Pillow | CWE-400 Uncontrolled Resource Consumption | 0.9% | Apr 15, 2026 |
| CVE-2026-34045 Linuxfoundation Podman Desktop | HIGH8.2 | Linuxfoundation Podman Desktop | CWE-209 | 0.7% | Apr 7, 2026 |
| CVE-2026-34593 Ash-Hq Ash Framework | HIGH8.2 | Ash-Hq Ash Framework | CWE-400 Uncontrolled Resource Consumption | 0.5% | Apr 2, 2026 |
| CVE-2026-33538 Parseplatform Parse-Server | HIGH8.7 | Parseplatform Parse-Server | CWE-400 Uncontrolled Resource Consumption | 0.8% | Mar 24, 2026 |
| CVE-2026-30653 Free5gc | HIGH7.5 | Free5gc | CWE-400 Uncontrolled Resource Consumption | 0.6% | Mar 24, 2026 |
| CVE-2026-4727 Mozilla Firefox | HIGH7.5 | Mozilla Firefox | CWE-400 Uncontrolled Resource Consumption | 0.5% | Mar 24, 2026 |
| CVE-2026-4726 Mozilla Firefox | HIGH7.5 | Mozilla Firefox | CWE-400 Uncontrolled Resource Consumption | 0.5% | Mar 24, 2026 |
| CVE-2026-4704 Mozilla Firefox | HIGH7.5 | Mozilla Firefox | CWE-400 Uncontrolled Resource Consumption | 0.6% | Mar 24, 2026 |
Page 1 of 2
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications