2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
19 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-109430 the affected product | HIGH8.7 | the affected product | CWE-611 XML External Entity | n/a | Oct 15, 2026 |
| CVE-2026-10025 Ibm Qradar Security Information And Event Manager | HIGH8.2 | Ibm Qradar Security Information And Event Manager | CWE-611 XML External Entity | 0.6% | Aug 5, 2026 |
| CVE-2026-56817 Netty | HIGH8.3 | Netty | CWE-611 XML External Entity | 0.7% | Jul 21, 2026 |
| CVE-2026-45071 Sensiolabs Symfony | HIGH8.7 | Sensiolabs Symfony | CWE-611 XML External Entity | 0.6% | Jul 14, 2026 |
| CVE-2026-55471 Hapifhir Hl7 Fhir Core | HIGH8.7 | Hapifhir Hl7 Fhir Core | CWE-611 XML External Entity | 0.6% | Jul 8, 2026 |
| CVE-2026-13449 Ibm Business Automation Manager | HIGH7.6 | Ibm Business Automation Manager | CWE-611 XML External Entity | 0.4% | Jun 30, 2026 |
| CVE-2026-6653 Xmlsoft Libxml2 | HIGH7.0 | Xmlsoft Libxml2 | CWE-416 Use After Free | 0.4% | Jun 22, 2026 |
| CVE-2026-49875 Apache Cxf | CRITICAL9.8 | Apache Cxf | CWE-611 XML External Entity | 0.8% | Jun 12, 2026 |
| CVE-2026-41895 Webtechnologies Changedetection | HIGH8.2 | Webtechnologies Changedetection | CWE-611 XML External Entity | 0.4% | May 12, 2026 |
| CVE-2025-14543 Rti Connext Professional | HIGH8.8 | Rti Connext Professional | CWE-611 XML External Entity | 0.2% | Apr 30, 2026 |
| CVE-2024-13971 Lobster-World Lobster Pro | HIGH7.7 | Lobster-World Lobster Pro | CWE-611 XML External Entity | 0.5% | Apr 30, 2026 |
| CVE-2024-39847 4d Server | HIGH8.7 | 4d Server | CWE-611 XML External Entity | 0.4% | Apr 30, 2026 |
| CVE-2024-2374 Wso2 Api Manager | HIGH7.5 | Wso2 Api Manager | CWE-611 XML External Entity | 0.4% | Apr 16, 2026 |
| CVE-2026-4374 Rti Connext Professional | HIGH8.8 | Rti Connext Professional | CWE-611 XML External Entity | 0.4% | Apr 1, 2026 |
| CVE-2026-1567 Ibm Infosphere Information Server | HIGH7.1 | Ibm Infosphere Information Server | CWE-611 XML External Entity | 0.3% | Mar 3, 2026 |
| CVE-2025-36247 Ibm Db2 | HIGH7.1 | Ibm Db2 | CWE-611 XML External Entity | 0.3% | Feb 17, 2026 |
| CVE-2026-24400 Assertj | HIGH8.2 | Assertj | CWE-611 XML External Entity | 0.6% | Jan 26, 2026 |
| CVE-2025-68493 Apache Struts | HIGH8.1 | Apache Struts | CWE-611 XML External Entity | 45.8% | Jan 11, 2026 |
| CVE-2025-36589 Dell Unisphere For Powermax | HIGH7.6 | Dell Unisphere For Powermax | CWE-611 XML External Entity | 0.3% | Jan 6, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications