2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
23 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-88829 the affected product | HIGH7.2 | the affected product | CWE-444 | 0.3% | Oct 14, 2026 |
| CVE-2026-88773 Citrix Netscaler Application Delivery Controller | CRITICAL9.3 | Citrix Netscaler Application Delivery Controller | CWE-444 | 0.4% | Sep 27, 2026 |
| CVE-2026-88009 Traefik | HIGH8.8 | Traefik | CWE-444 | 0.4% | Sep 10, 2026 |
| CVE-2026-88008 Traefik | HIGH7.0 | Traefik | CWE-444 | 0.5% | Sep 10, 2026 |
| CVE-2026-74848 Apache Apisix | HIGH7.0 | Apache Apisix | CWE-444 | 0.6% | Aug 27, 2026 |
| CVE-2026-71324 Traefik | HIGH7.0 | Traefik | CWE-444 | 1.1% | Aug 6, 2026 |
| CVE-2026-15328 Ibm Websphere Application Server | HIGH7.4 | Ibm Websphere Application Server | CWE-444 | 0.4% | Jul 28, 2026 |
| CVE-2026-11541 Ibm Websphere Application Server | HIGH7.4 | Ibm Websphere Application Server | CWE-444 | 0.4% | Jun 30, 2026 |
| CVE-2026-11806 Ibm Websphere Application Server | HIGH7.2 | Ibm Websphere Application Server | CWE-444 | 0.5% | Jun 30, 2026 |
| CVE-2026-8646 Ibm Websphere Application Server | HIGH7.4 | Ibm Websphere Application Server | CWE-444 | 0.6% | Jun 22, 2026 |
| CVE-2026-42584 Netty | HIGH7.3 | Netty | CWE-444 | 0.7% | May 13, 2026 |
| CVE-2026-41873 Apache Pony Mail | CRITICAL9.8 | Apache Pony Mail | CWE-444 | 0.7% | Apr 28, 2026 |
| CVE-2026-33805 Fastify/Http-Proxy | CRITICAL9.0 | Fastify/Http-Proxy | CWE-644 | 0.6% | Apr 15, 2026 |
| CVE-2026-2332 Eclipse Jetty | HIGH7.4 | Eclipse Jetty | CWE-444 | 1.3% | Apr 14, 2026 |
| CVE-2026-28369 Redhat Build Of Apache Camel - Hawtio | HIGH8.7 | Redhat Build Of Apache Camel - Hawtio | CWE-444 | 0.9% | Mar 27, 2026 |
| CVE-2026-28368 Redhat Build Of Apache Camel - Hawtio | HIGH8.7 | Redhat Build Of Apache Camel - Hawtio | CWE-444 | 0.9% | Mar 27, 2026 |
| CVE-2026-28367 Redhat Build Of Apache Camel - Hawtio | HIGH8.7 | Redhat Build Of Apache Camel - Hawtio | CWE-444 | 0.9% | Mar 27, 2026 |
| CVE-2026-4700 Mozilla Firefox | CRITICAL9.8 | Mozilla Firefox | CWE-288 Authentication Bypass via Alternate Path | 0.5% | Mar 24, 2026 |
| CVE-2026-23941 Erlang/Inets | HIGH7.0 | Erlang/Inets | CWE-444 | 0.5% | Mar 13, 2026 |
| CVE-2026-28497 Ritlabs Tinyweb | CRITICAL9.3 | Ritlabs Tinyweb | CWE-190 Integer Overflow | 0.7% | Mar 6, 2026 |
| CVE-2026-2835 Cloudflare Pingora | CRITICAL9.3 | Cloudflare Pingora | CWE-444 | 0.6% | Mar 5, 2026 |
| CVE-2026-2833 Cloudflare Pingora | CRITICAL9.3 | Cloudflare Pingora | CWE-444 | 0.5% | Mar 5, 2026 |
| CVE-2026-23527 H3 | HIGH8.9 | H3 | CWE-444 | 0.6% | Jan 15, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications