2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
27 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-81534 the affected product | HIGH8.8 | the affected product | CWE-74 | n/a | Oct 15, 2026 |
| CVE-2026-109961 the affected product | HIGH8.4 | the affected product | CWE-74 | 0.2% | Oct 13, 2026 |
| CVE-2026-108929 the affected product | CRITICAL9.4 | the affected product | CWE-74 | 0.4% | Oct 12, 2026 |
| CVE-2026-108918 the affected product | CRITICAL9.3 | the affected product | CWE-74 | 2.0% | Oct 12, 2026 |
| CVE-2026-18614 the affected product | HIGH8.9 | the affected product | CWE-74 | 3.6% | Aug 3, 2026 |
| CVE-2026-18602 the affected product | HIGH8.9 | the affected product | CWE-74 | 3.6% | Aug 3, 2026 |
| CVE-2026-69097 Gitpython Project Gitpython | HIGH7.3 | Gitpython Project Gitpython | CWE-74 | 0.3% | Aug 3, 2026 |
| CVE-2026-44182 Jupyter Enterprise Gateway | CRITICAL10.0 | Jupyter Enterprise Gateway | CWE-74 | 0.6% | Jul 16, 2026 |
| CVE-2026-55404 Yt-Dlp Project Yt-Dlp | HIGH7.5 | Yt-Dlp Project Yt-Dlp | CWE-74 | 0.6% | Jul 8, 2026 |
| CVE-2026-50574 Yt-Dlp Project Yt-Dlp | HIGH8.3 | Yt-Dlp Project Yt-Dlp | CWE-74 | 0.5% | Jun 23, 2026 |
| CVE-2026-47162 Vim | HIGH7.3 | Vim | CWE-74 | 0.3% | Jun 11, 2026 |
| CVE-2025-67486 Dolibarr Erp/Crm | HIGH8.6 | Dolibarr Erp/Crm | CWE-74 | 0.9% | May 8, 2026 |
| CVE-2026-30932 Froxlor | HIGH8.6 | Froxlor | CWE-74 | 0.7% | Mar 24, 2026 |
| CVE-2026-32622 Fit2cloud Sqlbot | HIGH8.6 | Fit2cloud Sqlbot | CWE-20 Improper Input Validation | 0.8% | Mar 19, 2026 |
| CVE-2026-29186 Linuxfoundation Backstage Plugin-Techdocs-Node | HIGH7.7 | Linuxfoundation Backstage Plugin-Techdocs-Node | CWE-74 | 0.9% | Mar 7, 2026 |
| CVE-2026-29046 Ritlabs Tinyweb | CRITICAL9.2 | Ritlabs Tinyweb | CWE-20 Improper Input Validation | 0.6% | Mar 6, 2026 |
| CVE-2026-29053 Ghost | HIGH7.6 | Ghost | CWE-74 | 5.0% | Mar 5, 2026 |
| CVE-2026-25750 Langchain Langsmith | HIGH8.5 | Langchain Langsmith | CWE-74 | 0.5% | Mar 4, 2026 |
| CVE-2026-27148 Storybook | HIGH8.9 | Storybook | CWE-74 | 0.6% | Feb 25, 2026 |
| CVE-2026-27727 Mchange Commons Java | HIGH8.9 | Mchange Commons Java | CWE-74 | 1.6% | Feb 25, 2026 |
| CVE-2025-67733 Lfprojects Valkey | HIGH8.5 | Lfprojects Valkey | CWE-74 | 0.6% | Feb 23, 2026 |
| CVE-2026-27194 Man D-Tale | HIGH8.1 | Man D-Tale | CWE-74 | 1.0% | Feb 21, 2026 |
| CVE-2026-25814 Prasklatechnology Placipy | CRITICAL9.3 | Prasklatechnology Placipy | CWE-74 | 0.7% | Feb 9, 2026 |
| CVE-2026-24010 Horilla | HIGH8.0 | Horilla | CWE-74 | 0.5% | Jan 22, 2026 |
| CVE-2026-24002 Getgrist Grist-Core | CRITICAL9.0 | Getgrist Grist-Core | CWE-74 | 0.5% | Jan 22, 2026 |
| CVE-2026-22708 Anysphere Cursor | HIGH7.2 | Anysphere Cursor | CWE-15 | 0.8% | Jan 14, 2026 |
| CVE-2026-22200 Enhancesoft Osticket | HIGH8.7 | Enhancesoft Osticket | CWE-74 | 73.6% | Jan 12, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications