2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
33 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-16916 Ibm Security Verify Access | CRITICAL9.1 | Ibm Security Verify Access | CWE-693 | 0.4% | Oct 8, 2026 |
| CVE-2026-69278 Microsoft Visual Studio Code | HIGH7.8 | Microsoft Visual Studio Code | CWE-693 | 0.3% | Aug 11, 2026 |
| CVE-2026-48807 Symfony Twig | HIGH7.1 | Symfony Twig | CWE-693 | 0.4% | Jul 14, 2026 |
| CVE-2026-48806 Symfony Twig | HIGH7.1 | Symfony Twig | CWE-693 | 0.4% | Jul 14, 2026 |
| CVE-2026-46634 Symfony Twig | HIGH7.7 | Symfony Twig | CWE-693 | 0.6% | Jul 14, 2026 |
| CVE-2026-14535 Trailofbits Fickling | HIGH8.8 | Trailofbits Fickling | CWE-693 | 0.6% | Jul 4, 2026 |
| CVE-2026-14120 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.3% | Jun 30, 2026 |
| CVE-2026-14101 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-269 Improper Privilege Management | 0.3% | Jun 30, 2026 |
| CVE-2026-55487 Pnpm | HIGH7.5 | Pnpm | CWE-346 | 0.2% | Jun 25, 2026 |
| CVE-2026-24425 Symfony Twig | HIGH8.7 | Symfony Twig | CWE-693 | 0.8% | May 20, 2026 |
| CVE-2026-26332 Vm2 Project Vm2 | CRITICAL9.8 | Vm2 Project Vm2 | CWE-94 Code Injection | 0.7% | May 4, 2026 |
| CVE-2026-40158 Praisonai | HIGH8.6 | Praisonai | CWE-94 Code Injection | 0.2% | Apr 10, 2026 |
| CVE-2026-39888 Praisonai | CRITICAL9.9 | Praisonai | CWE-657 | 0.6% | Apr 8, 2026 |
| CVE-2026-35408 Monospace Directus | HIGH8.7 | Monospace Directus | CWE-346 | 0.2% | Apr 6, 2026 |
| CVE-2026-34208 Nyariv Sandboxjs | CRITICAL10.0 | Nyariv Sandboxjs | CWE-693 | 0.6% | Apr 6, 2026 |
| CVE-2026-34072 Fccview Cronmaster | HIGH8.3 | Fccview Cronmaster | CWE-287 Improper Authentication | 0.9% | Apr 1, 2026 |
| CVE-2026-28500 Linuxfoundation Onnx | HIGH8.6 | Linuxfoundation Onnx | CWE-345 | 0.3% | Mar 18, 2026 |
| CVE-2024-55024 Weintek Easyweb | CRITICAL9.8 | Weintek Easyweb | CWE-693 | 0.4% | Mar 3, 2026 |
| CVE-2026-0017 Google Android | HIGH7.7 | Google Android | CWE-285 Improper Authorization | 0.1% | Mar 2, 2026 |
| CVE-2026-0011 Google Android | HIGH8.4 | Google Android | CWE-693 | 0.1% | Mar 2, 2026 |
| CVE-2025-48653 Google Android | HIGH7.8 | Google Android | CWE-693 | 0.1% | Mar 2, 2026 |
| CVE-2025-48635 Google Android | HIGH7.7 | Google Android | CWE-200 Information Exposure | 0.1% | Mar 2, 2026 |
| CVE-2025-48605 Google Android | HIGH8.4 | Google Android | CWE-693 | 0.1% | Mar 2, 2026 |
| CVE-2025-48602 Google Android | HIGH8.4 | Google Android | CWE-693 | 0.1% | Mar 2, 2026 |
| CVE-2026-2803 Mozilla Firefox | HIGH7.5 | Mozilla Firefox | CWE-200 Information Exposure | 0.5% | Feb 24, 2026 |
| CVE-2026-2768 Mozilla Firefox | CRITICAL10.0 | Mozilla Firefox | CWE-284 Improper Access Control | 0.6% | Feb 24, 2026 |
| CVE-2026-2761 Mozilla Firefox | CRITICAL10.0 | Mozilla Firefox | CWE-693 | 0.6% | Feb 24, 2026 |
| CVE-2026-20667 Apple Ipados | HIGH8.8 | Apple Ipados | CWE-693 | 0.1% | Feb 11, 2026 |
| CVE-2026-25115 N8n | CRITICAL9.4 | N8n | CWE-693 | 0.6% | Feb 4, 2026 |
| CVE-2026-25056 N8n | CRITICAL9.4 | N8n | CWE-434 Unrestricted File Upload | 0.7% | Feb 4, 2026 |
| CVE-2025-40536 Exploited SolarWinds Web Help Desk | HIGH8.1 | SolarWinds Web Help Desk | CWE-693 | 73.6% | Jan 28, 2026 |
| CVE-2026-22709 Vm2 Project Vm2 | CRITICAL9.8 | Vm2 Project Vm2 | CWE-94 Code Injection | 1.3% | Jan 26, 2026 |
| CVE-2025-69264 Pnpm | HIGH8.8 | Pnpm | CWE-693 | 1.0% | Jan 7, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications