2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
68 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-108587 the affected product | CRITICAL9.8 | the affected product | CWE-434 Unrestricted File Upload | n/a | Oct 15, 2026 |
| CVE-2026-86461 the affected product | HIGH8.8 | the affected product | CWE-434 Unrestricted File Upload | n/a | Oct 14, 2026 |
| CVE-2026-104800 the affected product | CRITICAL9.8 | the affected product | CWE-434 Unrestricted File Upload | 1.0% | Oct 14, 2026 |
| CVE-2026-110002 the affected product | CRITICAL9.8 | the affected product | CWE-434 Unrestricted File Upload | 1.0% | Oct 14, 2026 |
| CVE-2026-91844 the affected product | HIGH7.3 | the affected product | CWE-434 Unrestricted File Upload | 0.2% | Oct 8, 2026 |
| CVE-2026-105868 Payloadcms Payload | HIGH8.6 | Payloadcms Payload | CWE-434 Unrestricted File Upload | 0.3% | Oct 6, 2026 |
| CVE-2026-103474 the affected product | HIGH8.7 | the affected product | CWE-434 Unrestricted File Upload | 0.4% | Sep 30, 2026 |
| CVE-2026-102427 Ordasoft Joomla Cck | CRITICAL10.0 | Ordasoft Joomla Cck | CWE-434 Unrestricted File Upload | 0.8% | Sep 30, 2026 |
| CVE-2026-81240 Dell Wyse Management Suite | HIGH8.6 | Dell Wyse Management Suite | CWE-434 Unrestricted File Upload | 0.4% | Sep 15, 2026 |
| CVE-2026-81239 Dell Wyse Management Suite | HIGH8.6 | Dell Wyse Management Suite | CWE-434 Unrestricted File Upload | 0.4% | Sep 15, 2026 |
| CVE-2026-81236 Dell Wyse Management Suite | HIGH8.6 | Dell Wyse Management Suite | CWE-434 Unrestricted File Upload | 0.4% | Sep 15, 2026 |
| CVE-2026-16286 the affected product | CRITICAL9.8 | the affected product | CWE-434 Unrestricted File Upload | 0.3% | Aug 25, 2026 |
| CVE-2026-73373 Joomla! | HIGH8.9 | Joomla! | CWE-434 Unrestricted File Upload | 0.6% | Aug 18, 2026 |
| CVE-2026-72762 N8n | HIGH7.7 | N8n | CWE-434 Unrestricted File Upload | 0.5% | Aug 11, 2026 |
| CVE-2026-65885 Balbooa Gridbox | CRITICAL9.4 | Balbooa Gridbox | CWE-434 Unrestricted File Upload | 0.5% | Jul 29, 2026 |
| CVE-2026-48356 Adobe Commerce | CRITICAL9.3 | Adobe Commerce | CWE-434 Unrestricted File Upload | 1.0% | Jul 14, 2026 |
| CVE-2026-57828 Phoca Download | CRITICAL9.0 | Phoca Download | CWE-434 Unrestricted File Upload | 0.5% | Jul 11, 2026 |
| CVE-2026-57827 Rsjoomla Rsfiles! | CRITICAL10.0 | Rsjoomla Rsfiles! | CWE-434 Unrestricted File Upload | 2.3% | Jul 11, 2026 |
| CVE-2026-56291 Exploited Balbooa Forms | CRITICAL10.0 | Balbooa Forms | CWE-434 Unrestricted File Upload | 14.9% | Jul 9, 2026 |
| CVE-2026-58480 the affected product | CRITICAL9.2 | the affected product | CWE-434 Unrestricted File Upload | 3.6% | Jul 8, 2026 |
| CVE-2026-56290 Exploited Joomlack Page Builder | CRITICAL10.0 | Joomlack Page Builder | CWE-434 Unrestricted File Upload | 30.9% | Jun 29, 2026 |
| CVE-2026-33560 Daktronics Dmp-5000 Firmware | HIGH8.4 | Daktronics Dmp-5000 Firmware | CWE-434 Unrestricted File Upload | 0.4% | Jun 26, 2026 |
| CVE-2026-48939 Exploited iCagenda | CRITICAL10.0 | iCagenda | CWE-434 Unrestricted File Upload | 20.1% | Jun 20, 2026 |
| CVE-2026-48908 Exploited JoomShaper SP Page Builder | CRITICAL10.0 | JoomShaper SP Page Builder | CWE-434 Unrestricted File Upload | 88.5% | Jun 20, 2026 |
| CVE-2026-11419 Altium On-Prem Enterprise Server | CRITICAL9.4 | Altium On-Prem Enterprise Server | CWE-22 Path Traversal | 0.5% | Jun 5, 2026 |
| CVE-2026-40412 Microsoft Azure Orbital Spatio | CRITICAL10.0 | Microsoft Azure Orbital Spatio | CWE-434 Unrestricted File Upload | 1.0% | May 22, 2026 |
| CVE-2026-8134 Concretecms Concrete Cms | CRITICAL9.4 | Concretecms Concrete Cms | CWE-23 | 1.1% | May 21, 2026 |
| CVE-2026-44566 Openwebui Open Webui | HIGH7.3 | Openwebui Open Webui | CWE-22 Path Traversal | 0.5% | May 15, 2026 |
| CVE-2026-42844 Getgrav Grav | HIGH8.7 | Getgrav Grav | CWE-269 Improper Privilege Management | 0.5% | May 12, 2026 |
| CVE-2026-7490 Sun.Net Ehrd Cpas | HIGH8.6 | Sun.Net Ehrd Cpas | CWE-434 Unrestricted File Upload | 0.8% | May 2, 2026 |
| CVE-2026-41269 Flowiseai Flowise | HIGH7.1 | Flowiseai Flowise | CWE-434 Unrestricted File Upload | 0.7% | Apr 23, 2026 |
| CVE-2026-40488 Openmage Magento | HIGH8.7 | Openmage Magento | CWE-434 Unrestricted File Upload | 1.0% | Apr 20, 2026 |
| CVE-2026-40487 Gitroom Postiz | HIGH8.9 | Gitroom Postiz | CWE-79 Cross Site Scripting | 0.3% | Apr 18, 2026 |
| CVE-2026-30804 Artica Pandora Fms | HIGH8.6 | Artica Pandora Fms | CWE-434 Unrestricted File Upload | 0.8% | Apr 13, 2026 |
| CVE-2026-33704 Chamilo Lms | HIGH7.1 | Chamilo Lms | CWE-434 Unrestricted File Upload | 0.8% | Apr 10, 2026 |
| CVE-2026-32931 Chamilo Lms | HIGH7.5 | Chamilo Lms | CWE-434 Unrestricted File Upload | 0.9% | Apr 10, 2026 |
| CVE-2026-35174 Chyrplite Chyrp Lite | CRITICAL9.1 | Chyrplite Chyrp Lite | CWE-22 Path Traversal | 0.9% | Apr 6, 2026 |
| CVE-2026-35047 Ajax30 Bravecms | CRITICAL9.3 | Ajax30 Bravecms | CWE-434 Unrestricted File Upload | 1.0% | Apr 6, 2026 |
| CVE-2025-59710 Kovai Biztalk360 | HIGH8.8 | Kovai Biztalk360 | CWE-434 Unrestricted File Upload | 0.5% | Apr 3, 2026 |
| CVE-2026-2701 Progress Sharefile Storage Zones Controller | CRITICAL9.1 | Progress Sharefile Storage Zones Controller | CWE-78 OS Command Injection | 3.4% | Apr 2, 2026 |
| CVE-2025-32957 Basercms | HIGH8.7 | Basercms | CWE-434 Unrestricted File Upload | 0.6% | Mar 31, 2026 |
| CVE-2026-25099 Bludit | HIGH8.7 | Bludit | CWE-434 Unrestricted File Upload | 1.9% | Mar 27, 2026 |
| CVE-2019-25627 Flexhex | HIGH8.6 | Flexhex | CWE-434 Unrestricted File Upload | 0.3% | Mar 24, 2026 |
| CVE-2019-25626 River Past Cam Do Project River Past Cam Do | HIGH8.6 | River Past Cam Do Project River Past Cam Do | CWE-434 Unrestricted File Upload | 0.2% | Mar 24, 2026 |
| CVE-2026-29186 Linuxfoundation Backstage Plugin-Techdocs-Node | HIGH7.7 | Linuxfoundation Backstage Plugin-Techdocs-Node | CWE-74 | 0.9% | Mar 7, 2026 |
| CVE-2026-30821 Flowiseai Flowise | HIGH8.2 | Flowiseai Flowise | CWE-434 Unrestricted File Upload | 0.9% | Mar 7, 2026 |
| CVE-2026-28502 Wwbn Avideo | CRITICAL9.3 | Wwbn Avideo | CWE-434 Unrestricted File Upload | 1.0% | Mar 6, 2026 |
| CVE-2026-21628 Templaza Astroid Framework | CRITICAL10.0 | Templaza Astroid Framework | CWE-434 Unrestricted File Upload | 0.5% | Mar 5, 2026 |
| CVE-2026-2743 Seppmail | CRITICAL10.0 | Seppmail | CWE-22 Path Traversal | 1.0% | Mar 5, 2026 |
| CVE-2026-28289 Freescout | CRITICAL10.0 | Freescout | CWE-434 Unrestricted File Upload | 2.7% | Mar 3, 2026 |
Page 1 of 2
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications