2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
138 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-110873 the affected product | HIGH7.1 | the affected product | CWE-863 Incorrect Authorization | n/a | Oct 14, 2026 |
| CVE-2026-110867 the affected product | CRITICAL9.0 | the affected product | CWE-863 Incorrect Authorization | n/a | Oct 14, 2026 |
| CVE-2026-110144 Google Chrome | HIGH8.6 | Google Chrome | CWE-863 Incorrect Authorization | 0.1% | Oct 13, 2026 |
| CVE-2026-106623 the affected product | HIGH7.5 | the affected product | CWE-863 Incorrect Authorization | 0.5% | Oct 13, 2026 |
| CVE-2026-110112 the affected product | CRITICAL9.2 | the affected product | CWE-863 Incorrect Authorization | 0.4% | Oct 13, 2026 |
| CVE-2026-74036 the affected product | HIGH8.6 | the affected product | CWE-863 Incorrect Authorization | 0.8% | Oct 13, 2026 |
| CVE-2026-106199 Google Chrome | HIGH8.2 | Google Chrome | CWE-863 Incorrect Authorization | 0.2% | Oct 6, 2026 |
| CVE-2026-106195 Google Chrome | CRITICAL9.1 | Google Chrome | CWE-863 Incorrect Authorization | 0.3% | Oct 6, 2026 |
| CVE-2026-105851 Payloadcms Payload | CRITICAL9.3 | Payloadcms Payload | CWE-284 Improper Access Control | 0.3% | Oct 6, 2026 |
| CVE-2026-101880 the affected product | HIGH8.7 | the affected product | CWE-863 Incorrect Authorization | 0.7% | Sep 30, 2026 |
| CVE-2026-100277 Jetbrains Youtrack | HIGH8.9 | Jetbrains Youtrack | CWE-863 Incorrect Authorization | 0.3% | Sep 30, 2026 |
| CVE-2026-100273 Jetbrains Youtrack | HIGH8.2 | Jetbrains Youtrack | CWE-863 Incorrect Authorization | 0.3% | Sep 30, 2026 |
| CVE-2026-100262 Jetbrains Youtrack | HIGH7.6 | Jetbrains Youtrack | CWE-863 Incorrect Authorization | 0.2% | Sep 30, 2026 |
| CVE-2026-95654 the affected product | CRITICAL9.1 | the affected product | CWE-863 Incorrect Authorization | 0.5% | Sep 22, 2026 |
| CVE-2026-68791 Microsoft Azure Machine Learning | HIGH8.6 | Microsoft Azure Machine Learning | CWE-863 Incorrect Authorization | 0.5% | Sep 17, 2026 |
| CVE-2026-65378 Apple Macos | HIGH7.5 | Apple Macos | CWE-863 Incorrect Authorization | 0.3% | Sep 14, 2026 |
| CVE-2026-88008 Traefik | HIGH7.0 | Traefik | CWE-444 | 0.5% | Sep 10, 2026 |
| CVE-2026-88007 Traefik | CRITICAL9.1 | Traefik | CWE-287 Improper Authentication | 0.6% | Sep 10, 2026 |
| CVE-2026-87570 Google Chrome | HIGH8.8 | Google Chrome | CWE-863 Incorrect Authorization | 0.3% | Sep 9, 2026 |
| CVE-2026-87544 Google Chrome | CRITICAL9.8 | Google Chrome | CWE-863 Incorrect Authorization | 0.3% | Sep 9, 2026 |
| CVE-2026-87450 Google Chrome | HIGH7.5 | Google Chrome | CWE-863 Incorrect Authorization | 0.3% | Sep 9, 2026 |
| CVE-2026-77774 Adobe Commerce | HIGH8.6 | Adobe Commerce | CWE-863 Incorrect Authorization | 0.8% | Sep 8, 2026 |
| CVE-2026-73313 Xenforo | HIGH7.6 | Xenforo | CWE-863 Incorrect Authorization | 0.6% | Sep 8, 2026 |
| CVE-2026-85597 Traefik | HIGH8.2 | Traefik | CWE-863 Incorrect Authorization | 0.4% | Sep 4, 2026 |
| CVE-2026-77125 Sonatype Nexus Repository Manager | HIGH7.1 | Sonatype Nexus Repository Manager | CWE-863 Incorrect Authorization | 0.3% | Sep 2, 2026 |
| CVE-2026-14199 Grafana | HIGH7.1 | Grafana | CWE-290 | 0.3% | Sep 2, 2026 |
| CVE-2026-59270 Vmware Spring Security | CRITICAL9.4 | Vmware Spring Security | CWE-863 Incorrect Authorization | 0.4% | Aug 27, 2026 |
| CVE-2026-19685 the affected product | HIGH7.1 | the affected product | CWE-863 Incorrect Authorization | 0.1% | Aug 24, 2026 |
| CVE-2026-55643 Snipeitapp Snipe-It | HIGH7.6 | Snipeitapp Snipe-It | CWE-863 Incorrect Authorization | 0.3% | Aug 19, 2026 |
| CVE-2026-44252 Wazuh | HIGH7.7 | Wazuh | CWE-863 Incorrect Authorization | 0.5% | Aug 19, 2026 |
| CVE-2026-48415 Adobe Commerce | HIGH7.6 | Adobe Commerce | CWE-863 Incorrect Authorization | 0.5% | Aug 11, 2026 |
| CVE-2026-69278 Microsoft Visual Studio Code | HIGH7.8 | Microsoft Visual Studio Code | CWE-693 | 0.3% | Aug 11, 2026 |
| CVE-2026-13738 Commvault | CRITICAL9.2 | Commvault | CWE-863 Incorrect Authorization | 0.6% | Aug 11, 2026 |
| CVE-2026-13737 Commvault | CRITICAL9.2 | Commvault | CWE-863 Incorrect Authorization | 0.5% | Aug 11, 2026 |
| CVE-2026-70474 Flowiseai Flowise | HIGH7.6 | Flowiseai Flowise | CWE-863 Incorrect Authorization | 0.5% | Aug 4, 2026 |
| CVE-2026-70472 Flowiseai Flowise | HIGH7.1 | Flowiseai Flowise | CWE-285 Improper Authorization | 0.5% | Aug 4, 2026 |
| CVE-2026-69262 Flowiseai Flowise | HIGH7.1 | Flowiseai Flowise | CWE-863 Incorrect Authorization | 0.5% | Aug 4, 2026 |
| CVE-2026-62927 Eclipse Milo | HIGH8.7 | Eclipse Milo | CWE-863 Incorrect Authorization | 0.4% | Aug 4, 2026 |
| CVE-2026-14537 Google Mcp Toolbox For Databases | HIGH8.1 | Google Mcp Toolbox For Databases | CWE-863 Incorrect Authorization | 0.3% | Jul 31, 2026 |
| CVE-2026-48449 Adobe Campaign | CRITICAL10.0 | Adobe Campaign | CWE-863 Incorrect Authorization | 0.9% | Jul 30, 2026 |
| CVE-2026-42016 Exploited JFrog Artifactory | HIGH8.1 | JFrog Artifactory | CWE-863 Incorrect Authorization | 8.6% | Jul 27, 2026 |
| CVE-2026-65015 N8n | HIGH7.2 | N8n | CWE-863 Incorrect Authorization | 0.6% | Jul 22, 2026 |
| CVE-2026-15829 Google Mcp Toolbox For Databases | HIGH8.6 | Google Mcp Toolbox For Databases | CWE-89 SQL Injection | 0.2% | Jul 21, 2026 |
| CVE-2026-53512 Better-Auth Better Auth | CRITICAL9.1 | Better-Auth Better Auth | CWE-287 Improper Authentication | 0.3% | Jul 15, 2026 |
| CVE-2026-48807 Symfony Twig | HIGH7.1 | Symfony Twig | CWE-693 | 0.4% | Jul 14, 2026 |
| CVE-2026-48806 Symfony Twig | HIGH7.1 | Symfony Twig | CWE-693 | 0.4% | Jul 14, 2026 |
| CVE-2026-48321 Adobe Coldfusion | CRITICAL9.3 | Adobe Coldfusion | CWE-863 Incorrect Authorization | 0.4% | Jul 14, 2026 |
| CVE-2026-48489 Sensiolabs Symfony | HIGH8.7 | Sensiolabs Symfony | CWE-863 Incorrect Authorization | 0.6% | Jul 14, 2026 |
| CVE-2026-47988 Adobe Commerce | HIGH8.6 | Adobe Commerce | CWE-863 Incorrect Authorization | 0.8% | Jul 14, 2026 |
| CVE-2026-47984 Adobe Commerce | HIGH8.2 | Adobe Commerce | CWE-863 Incorrect Authorization | 0.7% | Jul 14, 2026 |
Page 1 of 3
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications