2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
61 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-109227 the affected product | HIGH8.7 | the affected product | CWE-770 Allocation Without Limits | 0.4% | Oct 12, 2026 |
| CVE-2026-108859 the affected product | HIGH8.7 | the affected product | CWE-770 Allocation Without Limits | 0.5% | Oct 11, 2026 |
| CVE-2026-102993 Pypdf Project Pypdf | HIGH8.7 | Pypdf Project Pypdf | CWE-400 Uncontrolled Resource Consumption | 0.4% | Sep 30, 2026 |
| CVE-2026-103101 Pexip Infinity | HIGH8.6 | Pexip Infinity | CWE-770 Allocation Without Limits | 0.3% | Sep 30, 2026 |
| CVE-2026-86104 Watchguard Fireware | HIGH8.7 | Watchguard Fireware | CWE-400 Uncontrolled Resource Consumption | 0.4% | Sep 30, 2026 |
| CVE-2026-97689 Python Urllib3 | HIGH8.9 | Python Urllib3 | CWE-770 Allocation Without Limits | 0.3% | Sep 29, 2026 |
| CVE-2026-95845 Moquette | HIGH8.7 | Moquette | CWE-770 Allocation Without Limits | 0.4% | Sep 23, 2026 |
| CVE-2026-86075 N8n | HIGH8.7 | N8n | CWE-770 Allocation Without Limits | 0.6% | Sep 8, 2026 |
| CVE-2026-86452 Misp-Project Misp | HIGH8.7 | Misp-Project Misp | CWE-400 Uncontrolled Resource Consumption | 0.5% | Sep 7, 2026 |
| CVE-2026-71257 Apache Wicket | HIGH7.5 | Apache Wicket | CWE-770 Allocation Without Limits | 0.7% | Aug 31, 2026 |
| CVE-2026-59289 Vmware Spring For Graphql | HIGH7.5 | Vmware Spring For Graphql | CWE-770 Allocation Without Limits | 0.5% | Aug 27, 2026 |
| CVE-2026-73541 Zenhive Machine Payments Protocol | HIGH8.3 | Zenhive Machine Payments Protocol | CWE-770 Allocation Without Limits | 0.6% | Aug 19, 2026 |
| CVE-2026-17199 Ibm I | HIGH7.5 | Ibm I | CWE-770 Allocation Without Limits | 0.5% | Aug 13, 2026 |
| CVE-2026-11897 Ibm Websphere Application Server | HIGH7.5 | Ibm Websphere Application Server | CWE-770 Allocation Without Limits | 0.5% | Jul 30, 2026 |
| CVE-2026-59251 Erlang/Otp | HIGH8.7 | Erlang/Otp | CWE-770 Allocation Without Limits | 0.3% | Jul 27, 2026 |
| CVE-2026-58389 Apache Thrift | HIGH8.7 | Apache Thrift | CWE-770 Allocation Without Limits | 1.0% | Jul 27, 2026 |
| CVE-2026-55968 Apache Thrift | HIGH8.7 | Apache Thrift | CWE-407 | 1.0% | Jul 27, 2026 |
| CVE-2026-59204 Python Pillow | HIGH8.7 | Python Pillow | CWE-789 | 0.4% | Jul 14, 2026 |
| CVE-2026-57212 Broadcom Rabbitmq Server | HIGH7.1 | Broadcom Rabbitmq Server | CWE-770 Allocation Without Limits | 0.4% | Jul 10, 2026 |
| CVE-2026-59161 Excelize | HIGH8.7 | Excelize | CWE-400 Uncontrolled Resource Consumption | 0.7% | Jul 10, 2026 |
| CVE-2026-59873 Isaacs Tar | CRITICAL9.2 | Isaacs Tar | CWE-770 Allocation Without Limits | 0.6% | Jul 8, 2026 |
| CVE-2026-59870 Nodeca Js-Yaml | HIGH7.5 | Nodeca Js-Yaml | CWE-407 | 0.7% | Jul 8, 2026 |
| CVE-2026-56811 Phoenixframework Phoenix | HIGH8.7 | Phoenixframework Phoenix | CWE-770 Allocation Without Limits | 0.8% | Jul 7, 2026 |
| CVE-2026-43973 Ninenines Gun | HIGH8.7 | Ninenines Gun | CWE-770 Allocation Without Limits | 0.6% | Jun 8, 2026 |
| CVE-2026-28299 Solarwinds Web Help Desk | HIGH8.2 | Solarwinds Web Help Desk | CWE-770 Allocation Without Limits | 0.7% | Jun 2, 2026 |
| CVE-2026-1718 Ibm Db2 | HIGH7.1 | Ibm Db2 | CWE-770 Allocation Without Limits | 0.4% | May 27, 2026 |
| CVE-2026-47067 Benoitc Hackney | HIGH8.7 | Benoitc Hackney | CWE-770 Allocation Without Limits | 0.7% | May 25, 2026 |
| CVE-2026-39803 Mtrudel Bandit | HIGH8.7 | Mtrudel Bandit | CWE-770 Allocation Without Limits | 1.0% | May 13, 2026 |
| CVE-2026-42294 Argoproj Argo Workflows | HIGH8.2 | Argoproj Argo Workflows | CWE-770 Allocation Without Limits | 0.7% | May 9, 2026 |
| CVE-2026-42793 Absinthe-Graphql Absinthe | HIGH8.2 | Absinthe-Graphql Absinthe | CWE-770 Allocation Without Limits | 0.7% | May 8, 2026 |
| CVE-2026-39820 Golang Go | HIGH7.5 | Golang Go | CWE-770 Allocation Without Limits | 0.8% | May 7, 2026 |
| CVE-2026-41644 Monetr | HIGH8.3 | Monetr | CWE-209 | 0.4% | May 7, 2026 |
| CVE-2026-32934 Coredns.Io Coredns | HIGH8.7 | Coredns.Io Coredns | CWE-770 Allocation Without Limits | 0.6% | May 5, 2026 |
| CVE-2026-42236 N8n | HIGH8.7 | N8n | CWE-770 Allocation Without Limits | 0.7% | May 4, 2026 |
| CVE-2026-32688 Elixir-Plug Plug.Cowboy | HIGH8.7 | Elixir-Plug Plug.Cowboy | CWE-770 Allocation Without Limits | 0.8% | Apr 27, 2026 |
| CVE-2026-40498 Freescout | HIGH8.9 | Freescout | CWE-200 Information Exposure | 0.7% | Apr 21, 2026 |
| CVE-2026-40192 Python Pillow | HIGH8.7 | Python Pillow | CWE-400 Uncontrolled Resource Consumption | 0.9% | Apr 15, 2026 |
| CVE-2026-40073 Svelte Kit | HIGH8.2 | Svelte Kit | CWE-770 Allocation Without Limits | 1.0% | Apr 10, 2026 |
| CVE-2026-32283 Golang Go | HIGH7.5 | Golang Go | CWE-770 Allocation Without Limits | 0.6% | Apr 8, 2026 |
| CVE-2026-34593 Ash-Hq Ash Framework | HIGH8.2 | Ash-Hq Ash Framework | CWE-400 Uncontrolled Resource Consumption | 0.5% | Apr 2, 2026 |
| CVE-2026-32145 Gleam-Wisp Wisp | HIGH8.7 | Gleam-Wisp Wisp | CWE-770 Allocation Without Limits | 0.8% | Apr 2, 2026 |
| CVE-2026-33871 Netty | HIGH8.7 | Netty | CWE-770 Allocation Without Limits | 1.2% | Mar 27, 2026 |
| CVE-2026-26061 Fleetdm Fleet | HIGH8.7 | Fleetdm Fleet | CWE-770 Allocation Without Limits | 0.5% | Mar 27, 2026 |
| CVE-2026-33241 Salvo | HIGH8.7 | Salvo | CWE-770 Allocation Without Limits | 0.5% | Mar 24, 2026 |
| CVE-2026-33155 Qluster Deepdiff | HIGH8.7 | Qluster Deepdiff | CWE-400 Uncontrolled Resource Consumption | 0.5% | Mar 20, 2026 |
| CVE-2026-30946 Parseplatform Parse-Server | HIGH8.7 | Parseplatform Parse-Server | CWE-770 Allocation Without Limits | 0.7% | Mar 10, 2026 |
| CVE-2026-29062 Fasterxml Jackson-Core | HIGH8.7 | Fasterxml Jackson-Core | CWE-770 Allocation Without Limits | 0.8% | Mar 6, 2026 |
| CVE-2026-3520 Expressjs Multer | HIGH8.7 | Expressjs Multer | CWE-674 | 1.0% | Mar 4, 2026 |
| CVE-2026-27633 Ritlabs Tinyweb | HIGH8.7 | Ritlabs Tinyweb | CWE-400 Uncontrolled Resource Consumption | 0.8% | Feb 26, 2026 |
| CVE-2026-27630 Ritlabs Tinyweb | HIGH8.7 | Ritlabs Tinyweb | CWE-400 Uncontrolled Resource Consumption | 0.8% | Feb 26, 2026 |
Page 1 of 2
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications