2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
42 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-78019 Dell Policy Manager For Secure Connect Gateway | HIGH7.5 | Dell Policy Manager For Secure Connect Gateway | CWE-829 | 0.3% | Oct 9, 2026 |
| CVE-2026-86131 Watchguard Fireware | CRITICAL9.2 | Watchguard Fireware | CWE-94 Code Injection | 0.4% | Sep 30, 2026 |
| CVE-2026-17647 Ibm Financial Transaction Manager | HIGH8.8 | Ibm Financial Transaction Manager | CWE-829 | 0.2% | Sep 22, 2026 |
| CVE-2026-18252 Gitlab | HIGH7.3 | Gitlab | CWE-829 | 0.4% | Aug 26, 2026 |
| CVE-2026-73076 Vim | HIGH8.4 | Vim | CWE-94 Code Injection | 0.1% | Aug 11, 2026 |
| CVE-2026-66141 Exim | HIGH7.4 | Exim | CWE-829 | 0.1% | Jul 24, 2026 |
| CVE-2026-57860 the affected product | HIGH8.4 | the affected product | CWE-829 | 0.2% | Jul 17, 2026 |
| CVE-2026-58116 Hiyouga Llama-Factory | CRITICAL9.3 | Hiyouga Llama-Factory | CWE-94 Code Injection | 0.9% | Jun 30, 2026 |
| CVE-2026-55697 Pnpm | HIGH7.5 | Pnpm | CWE-78 OS Command Injection | 0.2% | Jun 25, 2026 |
| CVE-2026-55487 Pnpm | HIGH7.5 | Pnpm | CWE-346 | 0.2% | Jun 25, 2026 |
| CVE-2026-56447 Misp-Project Misp | CRITICAL9.3 | Misp-Project Misp | CWE-829 | 0.6% | Jun 22, 2026 |
| CVE-2026-46580 Eclipse Theia | HIGH8.4 | Eclipse Theia | CWE-829 | 0.5% | Jun 18, 2026 |
| CVE-2026-44691 Eclipse Theia | HIGH8.4 | Eclipse Theia | CWE-829 | 0.4% | Jun 18, 2026 |
| CVE-2026-44688 Eclipse Theia | HIGH8.4 | Eclipse Theia | CWE-829 | 0.5% | Jun 18, 2026 |
| CVE-2026-22283 Dell Powerflex Manager | HIGH7.5 | Dell Powerflex Manager | CWE-829 | 0.2% | Jun 17, 2026 |
| CVE-2026-12057 Foxit Ai | HIGH8.6 | Foxit Ai | CWE-829 | 0.1% | Jun 15, 2026 |
| CVE-2026-52858 Vim | HIGH7.3 | Vim | CWE-94 Code Injection | 0.2% | Jun 11, 2026 |
| CVE-2026-5241 Huggingface Transformers | CRITICAL9.6 | Huggingface Transformers | CWE-829 | 0.9% | Jun 3, 2026 |
| CVE-2026-5843 Docker Desktop | HIGH8.8 | Docker Desktop | CWE-829 | 0.2% | May 22, 2026 |
| CVE-2026-5817 Docker Desktop | HIGH8.8 | Docker Desktop | CWE-829 | 0.2% | May 22, 2026 |
| CVE-2026-8428 Concretecms Concrete Cms | HIGH7.5 | Concretecms Concrete Cms | CWE-352 Cross Site Request Forgery | 0.2% | May 21, 2026 |
| CVE-2026-8426 Concretecms Concrete Cms | HIGH7.5 | Concretecms Concrete Cms | CWE-352 Cross Site Request Forgery | 0.3% | May 21, 2026 |
| CVE-2026-44484 Lightningai Pytorch Lightning | CRITICAL9.3 | Lightningai Pytorch Lightning | CWE-506 | 0.7% | May 14, 2026 |
| CVE-2026-44336 Praisonai | CRITICAL9.4 | Praisonai | CWE-20 Improper Input Validation | 0.7% | May 8, 2026 |
| CVE-2026-43944 Electerm Project Electerm | CRITICAL9.4 | Electerm Project Electerm | CWE-20 Improper Input Validation | 0.6% | May 8, 2026 |
| CVE-2026-43003 Openstack Ironic Python Agent | HIGH8.0 | Openstack Ironic Python Agent | CWE-829 | 1.1% | May 1, 2026 |
| CVE-2026-41396 Openclaw | HIGH8.5 | Openclaw | CWE-829 | 0.2% | Apr 28, 2026 |
| CVE-2026-6859 Redhat Instructlab | HIGH8.8 | Redhat Instructlab | CWE-829 | 0.8% | Apr 22, 2026 |
| CVE-2026-6482 Rapid7 Insight Agent | HIGH8.5 | Rapid7 Insight Agent | CWE-829 | 0.2% | Apr 17, 2026 |
| CVE-2026-40154 Praisonai | CRITICAL9.3 | Praisonai | CWE-829 | 0.5% | Apr 9, 2026 |
| CVE-2026-1342 Ibm Security Verify Access | HIGH8.5 | Ibm Security Verify Access | CWE-829 | 0.2% | Apr 8, 2026 |
| CVE-2025-39666 Checkmk | CRITICAL9.3 | Checkmk | CWE-426 | 0.1% | Apr 7, 2026 |
| CVE-2026-32920 Openclaw | HIGH8.6 | Openclaw | CWE-829 | 0.4% | Mar 31, 2026 |
| CVE-2026-33075 Fastgpt | CRITICAL9.4 | Fastgpt | CWE-494 | 0.3% | Mar 20, 2026 |
| CVE-2026-28500 Linuxfoundation Onnx | HIGH8.6 | Linuxfoundation Onnx | CWE-345 | 0.3% | Mar 18, 2026 |
| CVE-2026-4255 Thermalright Tr-Vision Home | HIGH8.4 | Thermalright Tr-Vision Home | CWE-829 | 0.2% | Mar 16, 2026 |
| CVE-2026-28372 Gnu Inetutils | HIGH7.4 | Gnu Inetutils | CWE-829 | 0.2% | Feb 27, 2026 |
| CVE-2026-27615 Alex4ssb Adb Explorer | HIGH8.8 | Alex4ssb Adb Explorer | CWE-40 | 0.2% | Feb 25, 2026 |
| CVE-2026-26974 Slyde.Js Slyde | HIGH7.6 | Slyde.Js Slyde | CWE-829 | 0.8% | Feb 20, 2026 |
| CVE-2026-1699 Eclipse Theia Website | CRITICAL10.0 | Eclipse Theia Website | CWE-829 | 0.6% | Jan 30, 2026 |
| CVE-2026-22865 Gradle | HIGH8.6 | Gradle | CWE-494 | 0.2% | Jan 16, 2026 |
| CVE-2026-22816 Gradle | HIGH8.6 | Gradle | CWE-494 | 0.2% | Jan 16, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications