2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
107 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-88043 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | n/a | Oct 15, 2026 |
| CVE-2026-18586 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | n/a | Oct 15, 2026 |
| CVE-2026-18548 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | n/a | Oct 15, 2026 |
| CVE-2026-107751 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | 0.3% | Oct 14, 2026 |
| CVE-2026-107631 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | 0.3% | Oct 14, 2026 |
| CVE-2026-95816 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | 0.4% | Oct 14, 2026 |
| CVE-2026-93885 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | 0.4% | Oct 14, 2026 |
| CVE-2026-83592 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | 0.3% | Oct 14, 2026 |
| CVE-2026-77114 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | 0.3% | Oct 14, 2026 |
| CVE-2026-106629 the affected product | CRITICAL9.3 | the affected product | CWE-79 Cross Site Scripting | 0.7% | Oct 13, 2026 |
| CVE-2026-92922 the affected product | HIGH8.1 | the affected product | CWE-79 Cross Site Scripting | 0.9% | Oct 13, 2026 |
| CVE-2026-100133 the affected product | CRITICAL9.3 | the affected product | CWE-79 Cross Site Scripting | 0.9% | Oct 13, 2026 |
| CVE-2026-109960 the affected product | HIGH8.7 | the affected product | CWE-79 Cross Site Scripting | 0.3% | Oct 13, 2026 |
| CVE-2026-63354 the affected product | CRITICAL9.4 | the affected product | CWE-79 Cross Site Scripting | 0.4% | Oct 13, 2026 |
| CVE-2026-102562 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | 0.2% | Oct 13, 2026 |
| CVE-2026-109671 the affected product | HIGH8.5 | the affected product | CWE-79 Cross Site Scripting | 0.2% | Oct 12, 2026 |
| CVE-2026-109612 the affected product | HIGH8.5 | the affected product | CWE-79 Cross Site Scripting | 0.2% | Oct 12, 2026 |
| CVE-2026-109604 the affected product | HIGH8.5 | the affected product | CWE-79 Cross Site Scripting | 0.2% | Oct 12, 2026 |
| CVE-2026-109557 the affected product | HIGH8.4 | the affected product | CWE-79 Cross Site Scripting | 0.3% | Oct 12, 2026 |
| CVE-2026-109291 the affected product | HIGH8.5 | the affected product | CWE-79 Cross Site Scripting | 0.3% | Oct 12, 2026 |
| CVE-2026-93875 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | 0.2% | Oct 2, 2026 |
| CVE-2026-101127 Balbooa Forms | HIGH8.6 | Balbooa Forms | CWE-79 Cross Site Scripting | 0.3% | Sep 29, 2026 |
| CVE-2026-62368 Snipeitapp Snipe-It | HIGH8.1 | Snipeitapp Snipe-It | CWE-79 Cross Site Scripting | 0.4% | Sep 24, 2026 |
| CVE-2026-93659 the affected product | HIGH8.6 | the affected product | CWE-79 Cross Site Scripting | 0.4% | Sep 18, 2026 |
| CVE-2026-85385 Concretecms Concrete Cms | HIGH7.7 | Concretecms Concrete Cms | CWE-79 Cross Site Scripting | 0.5% | Sep 16, 2026 |
| CVE-2026-90650 the affected product | HIGH7.2 | the affected product | CWE-79 Cross Site Scripting | 0.4% | Sep 15, 2026 |
| CVE-2026-18119 Concretecms Concrete Cms | HIGH7.0 | Concretecms Concrete Cms | CWE-79 Cross Site Scripting | 0.3% | Sep 14, 2026 |
| CVE-2026-86738 Snipeitapp Snipe-It | CRITICAL9.3 | Snipeitapp Snipe-It | CWE-79 Cross Site Scripting | 0.5% | Sep 8, 2026 |
| CVE-2026-79419 Emxtecnologia Gestao X Business Suite | HIGH8.7 | Emxtecnologia Gestao X Business Suite | CWE-79 Cross Site Scripting | 0.4% | Sep 4, 2026 |
| CVE-2026-79418 Emxtecnologia Gestao X Business Suite | HIGH8.7 | Emxtecnologia Gestao X Business Suite | CWE-79 Cross Site Scripting | 0.4% | Sep 4, 2026 |
| CVE-2026-77072 N8n | HIGH8.4 | N8n | CWE-79 Cross Site Scripting | 0.3% | Aug 20, 2026 |
| CVE-2026-16627 Gitlab | HIGH7.7 | Gitlab | CWE-79 Cross Site Scripting | 0.5% | Aug 12, 2026 |
| CVE-2026-48414 Adobe Commerce | HIGH7.7 | Adobe Commerce | CWE-79 Cross Site Scripting | 0.3% | Aug 11, 2026 |
| CVE-2026-70355 Microsoft Sharepoint Server | HIGH7.3 | Microsoft Sharepoint Server | CWE-79 Cross Site Scripting | 0.8% | Aug 11, 2026 |
| CVE-2026-65767 Microsoft Teams | HIGH8.8 | Microsoft Teams | CWE-79 Cross Site Scripting | 0.6% | Aug 11, 2026 |
| CVE-2026-57104 Microsoft Azure Storage Explorer | HIGH8.8 | Microsoft Azure Storage Explorer | CWE-79 Cross Site Scripting | 0.9% | Aug 11, 2026 |
| CVE-2026-47687 Fogproject | HIGH7.3 | Fogproject | CWE-79 Cross Site Scripting | 0.4% | Jul 21, 2026 |
| CVE-2026-47685 Fogproject | HIGH7.3 | Fogproject | CWE-79 Cross Site Scripting | 0.4% | Jul 21, 2026 |
| CVE-2026-45738 Argoproj Argo Cd | HIGH7.3 | Argoproj Argo Cd | CWE-79 Cross Site Scripting | 0.6% | Jul 15, 2026 |
| CVE-2026-48320 Adobe Coldfusion | HIGH8.5 | Adobe Coldfusion | CWE-79 Cross Site Scripting | 0.4% | Jul 14, 2026 |
| CVE-2026-47995 Adobe Commerce | HIGH8.1 | Adobe Commerce | CWE-79 Cross Site Scripting | 0.7% | Jul 14, 2026 |
| CVE-2026-47994 Adobe Commerce | HIGH8.7 | Adobe Commerce | CWE-79 Cross Site Scripting | 0.7% | Jul 14, 2026 |
| CVE-2026-55034 Microsoft Sharepoint Server | HIGH7.3 | Microsoft Sharepoint Server | CWE-79 Cross Site Scripting | 0.9% | Jul 14, 2026 |
| CVE-2026-55021 Microsoft Sharepoint Server | HIGH7.3 | Microsoft Sharepoint Server | CWE-79 Cross Site Scripting | 0.9% | Jul 14, 2026 |
| CVE-2026-54433 Roundcube Webmail | HIGH7.2 | Roundcube Webmail | CWE-79 Cross Site Scripting | 0.3% | Jul 14, 2026 |
| CVE-2026-53963 Discourse | HIGH7.3 | Discourse | CWE-79 Cross Site Scripting | 0.7% | Jul 9, 2026 |
| CVE-2026-59214 Openwebui Open Webui | HIGH7.3 | Openwebui Open Webui | CWE-79 Cross Site Scripting | 0.4% | Jul 9, 2026 |
| CVE-2026-54527 Jupyterlab-Git | CRITICAL9.3 | Jupyterlab-Git | CWE-79 Cross Site Scripting | 0.5% | Jul 8, 2026 |
| CVE-2026-50178 Angular Language Service | HIGH8.7 | Angular Language Service | CWE-79 Cross Site Scripting | 0.5% | Jun 22, 2026 |
| CVE-2026-49241 Angular Language Service | HIGH8.7 | Angular Language Service | CWE-79 Cross Site Scripting | 0.2% | Jun 22, 2026 |
Page 1 of 3
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications