2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
43 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-105744 Docling | HIGH7.5 | Docling | CWE-22 Path Traversal | 0.3% | Oct 5, 2026 |
| CVE-2026-16338 Ibm Datastage On Cloud Pak For Data | CRITICAL9.9 | Ibm Datastage On Cloud Pak For Data | CWE-73 | 0.4% | Sep 14, 2026 |
| CVE-2026-86751 Snipeitapp Snipe-It | HIGH8.4 | Snipeitapp Snipe-It | CWE-73 | 0.4% | Sep 9, 2026 |
| CVE-2026-69805 Microsoft.Diagnostics.Runtime | HIGH7.5 | Microsoft.Diagnostics.Runtime | CWE-73 | 0.5% | Sep 8, 2026 |
| CVE-2026-85160 the affected product | HIGH7.2 | the affected product | CWE-73 | 0.4% | Sep 3, 2026 |
| CVE-2026-78675 Gitpython Project Gitpython | HIGH8.6 | Gitpython Project Gitpython | CWE-73 | 0.2% | Aug 25, 2026 |
| CVE-2026-62385 Nltk | HIGH8.2 | Nltk | CWE-73 | 0.4% | Aug 22, 2026 |
| CVE-2026-75913 the affected product | HIGH8.5 | the affected product | CWE-73 | 0.5% | Aug 18, 2026 |
| CVE-2026-16987 Ibm I | HIGH8.8 | Ibm I | CWE-73 | 0.2% | Aug 13, 2026 |
| CVE-2026-66310 Microsoft Edge | HIGH7.7 | Microsoft Edge | CWE-73 | 0.4% | Aug 4, 2026 |
| CVE-2026-50148 Metabase | CRITICAL10.0 | Metabase | CWE-73 | 0.8% | Jul 15, 2026 |
| CVE-2026-55002 Microsoft Sql Server 2016 | HIGH8.8 | Microsoft Sql Server 2016 | CWE-73 | 0.9% | Jul 14, 2026 |
| CVE-2026-58192 Appium/Storage-Plugin | HIGH8.6 | Appium/Storage-Plugin | CWE-22 Path Traversal | 0.6% | Jul 8, 2026 |
| CVE-2026-58293 Microsoft Edge Chromium | HIGH8.1 | Microsoft Edge Chromium | CWE-73 | 0.6% | Jul 3, 2026 |
| CVE-2026-10816 Citrix Netscaler Application Delivery Controller | HIGH7.1 | Citrix Netscaler Application Delivery Controller | CWE-73 | 0.6% | Jun 30, 2026 |
| CVE-2025-71338 Flowiseai Flowise | CRITICAL10.0 | Flowiseai Flowise | CWE-73 | 1.2% | Jun 25, 2026 |
| CVE-2025-71333 Flowiseai Flowise | CRITICAL9.3 | Flowiseai Flowise | CWE-73 | 0.9% | Jun 25, 2026 |
| CVE-2026-53915 Jetbrains Goland | HIGH7.1 | Jetbrains Goland | CWE-73 | 0.5% | Jun 19, 2026 |
| CVE-2026-47358 Tenable Terrascan | CRITICAL9.2 | Tenable Terrascan | CWE-73 | 0.6% | May 19, 2026 |
| CVE-2026-47357 Tenable Terrascan | CRITICAL9.2 | Tenable Terrascan | CWE-73 | 0.6% | May 19, 2026 |
| CVE-2026-30893 Wazuh | CRITICAL9.0 | Wazuh | CWE-22 Path Traversal | 0.6% | Apr 29, 2026 |
| CVE-2026-35032 Jellyfin | HIGH8.6 | Jellyfin | CWE-73 | 0.4% | Apr 14, 2026 |
| CVE-2026-39907 Unisys Webperfect Image Suite | HIGH7.0 | Unisys Webperfect Image Suite | CWE-73 | 1.0% | Apr 14, 2026 |
| CVE-2025-65115 Hitachi Job Management Partner 1/It Desktop Management-Manager | HIGH8.8 | Hitachi Job Management Partner 1/It Desktop Management-Manager | CWE-73 | 0.6% | Apr 7, 2026 |
| CVE-2026-35174 Chyrplite Chyrp Lite | CRITICAL9.1 | Chyrplite Chyrp Lite | CWE-22 Path Traversal | 0.9% | Apr 6, 2026 |
| CVE-2026-23898 Joomla! | HIGH8.6 | Joomla! | CWE-73 | 0.5% | Apr 1, 2026 |
| CVE-2026-33645 Shaneisrael Fireshare | HIGH7.1 | Shaneisrael Fireshare | CWE-22 Path Traversal | 0.5% | Mar 26, 2026 |
| CVE-2026-32949 Fit2cloud Sqlbot | HIGH8.7 | Fit2cloud Sqlbot | CWE-73 | 0.5% | Mar 20, 2026 |
| CVE-2026-32749 B3log Siyuan | HIGH7.6 | B3log Siyuan | CWE-22 Path Traversal | 0.6% | Mar 19, 2026 |
| CVE-2026-30903 Zoom Workplace Desktop | CRITICAL9.6 | Zoom Workplace Desktop | CWE-73 | 0.5% | Mar 11, 2026 |
| CVE-2026-27825 Mcp-Atlassian Mcp Atlassian | CRITICAL9.0 | Mcp-Atlassian Mcp Atlassian | CWE-22 Path Traversal | 1.5% | Mar 10, 2026 |
| CVE-2026-25573 Siemens Sicam Siapp Sdk | HIGH8.6 | Siemens Sicam Siapp Sdk | CWE-73 | 0.5% | Mar 10, 2026 |
| CVE-2026-30240 Budibase | CRITICAL9.6 | Budibase | CWE-22 Path Traversal | 0.3% | Mar 9, 2026 |
| CVE-2026-28459 Openclaw | HIGH7.1 | Openclaw | CWE-73 | 0.6% | Mar 5, 2026 |
| CVE-2026-28286 Zimaspace Zimaos | HIGH8.5 | Zimaspace Zimaos | CWE-73 | 0.6% | Mar 2, 2026 |
| CVE-2026-27211 Cloudhypervisor Cloud Hypervisor | CRITICAL9.1 | Cloudhypervisor Cloud Hypervisor | CWE-73 | 0.6% | Feb 21, 2026 |
| CVE-2026-1669 Keras | HIGH7.1 | Keras | CWE-73 | 0.3% | Feb 11, 2026 |
| CVE-2026-25636 Calibre-Ebook Calibre | HIGH8.2 | Calibre-Ebook Calibre | CWE-22 Path Traversal | 0.2% | Feb 6, 2026 |
| CVE-2026-25628 Qdrant | HIGH8.5 | Qdrant | CWE-73 | 0.7% | Feb 6, 2026 |
| CVE-2025-53912 Meddream Pacs Server | CRITICAL9.6 | Meddream Pacs Server | CWE-73 | 0.6% | Jan 20, 2026 |
| CVE-2026-22783 Dfir-Iris Iris | CRITICAL9.6 | Dfir-Iris Iris | CWE-73 | 0.4% | Jan 12, 2026 |
| CVE-2025-68428 Parall Jspdf | CRITICAL9.2 | Parall Jspdf | CWE-35 | 2.2% | Jan 5, 2026 |
| CVE-2025-62842 Qnap Hybrid Backup Sync | HIGH7.0 | Qnap Hybrid Backup Sync | CWE-73 | 0.3% | Jan 2, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications