2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
12 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-74037 the affected product | HIGH8.6 | the affected product | CWE-613 | 0.4% | Oct 13, 2026 |
| CVE-2026-83540 Wolfssh | HIGH7.7 | Wolfssh | CWE-287 Improper Authentication | 0.4% | Oct 7, 2026 |
| CVE-2026-17600 Sonatype Nexus Repository Manager | HIGH8.7 | Sonatype Nexus Repository Manager | CWE-613 | 0.2% | Aug 7, 2026 |
| CVE-2026-15967 Progress Moveit Transfer | HIGH7.5 | Progress Moveit Transfer | CWE-613 | 0.4% | Jul 23, 2026 |
| CVE-2026-56400 Openwebui Open Webui | CRITICAL9.0 | Openwebui Open Webui | CWE-613 | 0.5% | Jul 15, 2026 |
| CVE-2026-43983 Pocket-Id Pocket Id | HIGH8.5 | Pocket-Id Pocket Id | CWE-285 Improper Authorization | 0.4% | May 12, 2026 |
| CVE-2026-34570 Ci4-Cms-Erp Ci4ms | HIGH8.8 | Ci4-Cms-Erp Ci4ms | CWE-284 Improper Access Control | 0.7% | Apr 1, 2026 |
| CVE-2026-21622 Hexpm | CRITICAL9.5 | Hexpm | CWE-613 | 0.4% | Mar 5, 2026 |
| CVE-2026-26342 Tattile Smart+ Firmware | HIGH8.7 | Tattile Smart+ Firmware | CWE-613 | 1.0% | Feb 24, 2026 |
| CVE-2026-1435 Graylog | CRITICAL9.3 | Graylog | CWE-613 | 0.4% | Feb 18, 2026 |
| CVE-2026-24894 Php Frankenphp | HIGH8.7 | Php Frankenphp | CWE-269 Improper Privilege Management | 0.4% | Feb 12, 2026 |
| CVE-2025-55705 Evmapa | HIGH7.3 | Evmapa | CWE-613 | 0.3% | Jan 22, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications