2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
90 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-110536 the affected product | CRITICAL9.3 | the affected product | CWE-77 Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-109110 the affected product | CRITICAL9.3 | the affected product | CWE-77 Command Injection | 2.0% | Oct 13, 2026 |
| CVE-2026-109108 the affected product | HIGH8.6 | the affected product | CWE-77 Command Injection | 2.3% | Oct 13, 2026 |
| CVE-2026-108918 the affected product | CRITICAL9.3 | the affected product | CWE-74 | 2.0% | Oct 12, 2026 |
| CVE-2026-108896 the affected product | HIGH8.6 | the affected product | CWE-77 Command Injection | 2.2% | Oct 12, 2026 |
| CVE-2026-108804 the affected product | CRITICAL9.3 | the affected product | CWE-77 Command Injection | 2.4% | Oct 12, 2026 |
| CVE-2026-102827 Simple-Git Project Simple-Git | HIGH8.1 | Simple-Git Project Simple-Git | CWE-77 Command Injection | 0.4% | Sep 29, 2026 |
| CVE-2026-101072 the affected product | CRITICAL9.3 | the affected product | CWE-77 Command Injection | 2.0% | Sep 28, 2026 |
| CVE-2026-85885 Microsoft 365 Copilot | CRITICAL9.9 | Microsoft 365 Copilot | CWE-77 Command Injection | 0.7% | Sep 17, 2026 |
| CVE-2026-78501 Microsoft 365 Copilot Chat | HIGH8.6 | Microsoft 365 Copilot Chat | CWE-77 Command Injection | 0.5% | Sep 17, 2026 |
| CVE-2026-81048 Dell Thinos | CRITICAL9.6 | Dell Thinos | CWE-77 Command Injection | 2.4% | Sep 10, 2026 |
| CVE-2026-73763 Hpe Arubaos-Cx | HIGH7.1 | Hpe Arubaos-Cx | CWE-77 Command Injection | 0.5% | Sep 1, 2026 |
| CVE-2026-73751 Hpe Arubaos-Cx | HIGH8.8 | Hpe Arubaos-Cx | CWE-77 Command Injection | 0.7% | Sep 1, 2026 |
| CVE-2026-24301 Microsoft Copilot | HIGH8.8 | Microsoft Copilot | CWE-77 Command Injection | 4.1% | Aug 18, 2026 |
| CVE-2026-73078 Vim | HIGH8.6 | Vim | CWE-77 Command Injection | 0.3% | Aug 11, 2026 |
| CVE-2026-18614 the affected product | HIGH8.9 | the affected product | CWE-74 | 3.6% | Aug 3, 2026 |
| CVE-2026-18602 the affected product | HIGH8.9 | the affected product | CWE-74 | 3.6% | Aug 3, 2026 |
| CVE-2025-71392 Surrealdb | CRITICAL9.4 | Surrealdb | CWE-77 Command Injection | 0.4% | Jul 18, 2026 |
| CVE-2026-54402 Ui Unifi Os Server | CRITICAL9.9 | Ui Unifi Os Server | CWE-20 Improper Input Validation | 1.8% | Jul 2, 2026 |
| CVE-2026-12045 Pgadmin 4 | CRITICAL9.4 | Pgadmin 4 | CWE-77 Command Injection | 0.7% | Jun 19, 2026 |
| CVE-2026-42850 Kovidgoyal Kitty | HIGH7.4 | Kovidgoyal Kitty | CWE-77 Command Injection | 0.4% | Jun 12, 2026 |
| CVE-2026-45497 Microsoft Copilot | HIGH7.7 | Microsoft Copilot | CWE-77 Command Injection | 0.6% | Jun 4, 2026 |
| CVE-2026-8037 Exploited Progress LoadMaster | CRITICAL9.6 | Progress LoadMaster | CWE-77 Command Injection | 77.4% | Jun 4, 2026 |
| CVE-2026-49199 Acer Predator Connect W6x Firmware | CRITICAL10.0 | Acer Predator Connect W6x Firmware | CWE-77 Command Injection | 2.2% | May 29, 2026 |
| CVE-2026-49196 Acer Predator Connect W6x Firmware | HIGH8.6 | Acer Predator Connect W6x Firmware | CWE-77 Command Injection | 0.7% | May 29, 2026 |
| CVE-2026-48116 Mintplexlabs Anythingllm | HIGH7.5 | Mintplexlabs Anythingllm | CWE-77 Command Injection | 0.5% | May 28, 2026 |
| CVE-2026-5509 Tp-Link Archer Be450 Firmware | HIGH8.5 | Tp-Link Archer Be450 Firmware | CWE-20 Improper Input Validation | 5.2% | May 27, 2026 |
| CVE-2026-48694 Pavel-Odintsov Fastnetmon | HIGH8.1 | Pavel-Odintsov Fastnetmon | CWE-77 Command Injection | 0.4% | May 26, 2026 |
| CVE-2026-23652 Microsoft Power Pages | CRITICAL10.0 | Microsoft Power Pages | CWE-77 Command Injection | 0.6% | May 22, 2026 |
| CVE-2026-8632 Hp Linux Imaging And Printing | HIGH8.5 | Hp Linux Imaging And Printing | CWE-77 Command Injection | 4.6% | May 20, 2026 |
| CVE-2026-46508 Vercel Turborepo Language Server Protocol | HIGH8.4 | Vercel Turborepo Language Server Protocol | CWE-77 Command Injection | 0.2% | May 15, 2026 |
| CVE-2026-44871 Arubanetworks Arubaos | HIGH7.2 | Arubanetworks Arubaos | CWE-77 Command Injection | 1.4% | May 12, 2026 |
| CVE-2026-44870 Arubanetworks Arubaos | HIGH7.2 | Arubanetworks Arubaos | CWE-77 Command Injection | 1.4% | May 12, 2026 |
| CVE-2026-44869 Arubanetworks Arubaos | HIGH7.2 | Arubanetworks Arubaos | CWE-77 Command Injection | 1.4% | May 12, 2026 |
| CVE-2026-44868 Arubanetworks Arubaos | HIGH7.2 | Arubanetworks Arubaos | CWE-77 Command Injection | 1.4% | May 12, 2026 |
| CVE-2026-44867 Arubanetworks Arubaos | HIGH7.2 | Arubanetworks Arubaos | CWE-77 Command Injection | 1.4% | May 12, 2026 |
| CVE-2026-44866 Arubanetworks Arubaos | HIGH7.2 | Arubanetworks Arubaos | CWE-77 Command Injection | 1.4% | May 12, 2026 |
| CVE-2026-42893 Microsoft Outlook | HIGH7.4 | Microsoft Outlook | CWE-77 Command Injection | 0.7% | May 12, 2026 |
| CVE-2026-42271 Exploited BerriAI LiteLLM | HIGH8.7 | BerriAI LiteLLM | CWE-77 Command Injection | 92.6% | May 8, 2026 |
| CVE-2026-40068 Anthropic Claude Code | HIGH7.7 | Anthropic Claude Code | CWE-20 Improper Input Validation | 0.6% | May 5, 2026 |
| CVE-2026-26015 Arc53 Docsgpt | CRITICAL10.0 | Arc53 Docsgpt | CWE-77 Command Injection | 1.5% | Apr 29, 2026 |
| CVE-2026-31255 Tenda Ac18 Firmware | CRITICAL9.8 | Tenda Ac18 Firmware | CWE-77 Command Injection | 1.5% | Apr 27, 2026 |
| CVE-2026-41265 Flowiseai Flowise | CRITICAL9.2 | Flowiseai Flowise | CWE-77 Command Injection | 0.6% | Apr 23, 2026 |
| CVE-2026-41304 Wwbn Avideo | HIGH8.9 | Wwbn Avideo | CWE-77 Command Injection | 2.7% | Apr 22, 2026 |
| CVE-2026-39866 Lawnchair | HIGH7.4 | Lawnchair | CWE-77 Command Injection | 3.0% | Apr 21, 2026 |
| CVE-2026-4048 Progress Connection Manager For Objectscale | HIGH8.4 | Progress Connection Manager For Objectscale | CWE-77 Command Injection | 3.0% | Apr 20, 2026 |
| CVE-2026-3519 Progress Connection Manager For Objectscale | HIGH8.4 | Progress Connection Manager For Objectscale | CWE-77 Command Injection | 3.0% | Apr 20, 2026 |
| CVE-2026-3518 Progress Connection Manager For Objectscale | HIGH8.4 | Progress Connection Manager For Objectscale | CWE-77 Command Injection | 3.0% | Apr 20, 2026 |
| CVE-2026-3517 Progress Connection Manager For Objectscale | HIGH8.4 | Progress Connection Manager For Objectscale | CWE-77 Command Injection | 3.0% | Apr 20, 2026 |
| CVE-2026-31059 Utt 520w Firmware | CRITICAL9.8 | Utt 520w Firmware | CWE-77 Command Injection | 1.1% | Apr 6, 2026 |
Page 1 of 2
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications