2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
32 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-110859 the affected product | HIGH8.7 | the affected product | CWE-88 | n/a | Oct 14, 2026 |
| CVE-2026-110858 the affected product | CRITICAL9.2 | the affected product | CWE-88 | n/a | Oct 14, 2026 |
| CVE-2026-108929 the affected product | CRITICAL9.4 | the affected product | CWE-74 | 0.4% | Oct 12, 2026 |
| CVE-2026-87687 Broadcom Fabric Operating System | HIGH8.5 | Broadcom Fabric Operating System | CWE-88 | 0.2% | Oct 8, 2026 |
| CVE-2026-102827 Simple-Git Project Simple-Git | HIGH8.1 | Simple-Git Project Simple-Git | CWE-77 Command Injection | 0.4% | Sep 29, 2026 |
| CVE-2026-86060 Exploited MikroTik RouterOS | CRITICAL9.2 | MikroTik RouterOS | CWE-88 | 6.4% | Sep 5, 2026 |
| CVE-2026-76218 Gitpython Project Gitpython | HIGH7.7 | Gitpython Project Gitpython | CWE-88 | 0.8% | Aug 19, 2026 |
| CVE-2026-17347 Pgadmin 4 | HIGH7.7 | Pgadmin 4 | CWE-78 OS Command Injection | 0.7% | Jul 31, 2026 |
| CVE-2026-15793 Mobyproject Buildkit | HIGH7.3 | Mobyproject Buildkit | CWE-88 | 0.2% | Jul 21, 2026 |
| CVE-2026-49987 Yamadashy Repomix | HIGH7.5 | Yamadashy Repomix | CWE-88 | 0.7% | Jul 15, 2026 |
| CVE-2026-45068 Sensiolabs Symfony | HIGH8.7 | Sensiolabs Symfony | CWE-88 | 0.5% | Jul 14, 2026 |
| CVE-2026-47829 Cloudfoundry Bosh Cli | HIGH7.7 | Cloudfoundry Bosh Cli | CWE-88 | 0.4% | Jul 9, 2026 |
| CVE-2026-40079 Cacti | HIGH8.6 | Cacti | CWE-78 OS Command Injection | 1.7% | Jun 25, 2026 |
| CVE-2026-44790 N8n | CRITICAL9.4 | N8n | CWE-88 | 0.5% | Jun 23, 2026 |
| CVE-2026-49373 Jetbrains Teamcity | HIGH7.1 | Jetbrains Teamcity | CWE-88 | 0.6% | May 29, 2026 |
| CVE-2026-48116 Mintplexlabs Anythingllm | HIGH7.5 | Mintplexlabs Anythingllm | CWE-77 Command Injection | 0.5% | May 28, 2026 |
| CVE-2026-42601 Archivebox | CRITICAL9.3 | Archivebox | CWE-88 | 0.6% | May 9, 2026 |
| CVE-2026-42284 Gitpython Project Gitpython | HIGH8.1 | Gitpython Project Gitpython | CWE-88 | 0.7% | May 7, 2026 |
| CVE-2026-40281 Thecodingmachine Gotenberg | CRITICAL10.0 | Thecodingmachine Gotenberg | CWE-88 | 2.1% | May 6, 2026 |
| CVE-2026-40938 Linuxfoundation Tekton Pipelines | HIGH7.5 | Linuxfoundation Tekton Pipelines | CWE-88 | 0.9% | Apr 21, 2026 |
| CVE-2026-39884 Suyogs Mcp-Server-Kubernetes | HIGH8.3 | Suyogs Mcp-Server-Kubernetes | CWE-88 | 0.4% | Apr 15, 2026 |
| CVE-2026-35033 Jellyfin | CRITICAL9.3 | Jellyfin | CWE-88 | 0.5% | Apr 14, 2026 |
| CVE-2026-40113 Praisonai | HIGH8.4 | Praisonai | CWE-88 | 0.3% | Apr 9, 2026 |
| CVE-2026-35585 Filebrowser | HIGH7.5 | Filebrowser | CWE-78 OS Command Injection | 2.4% | Apr 7, 2026 |
| CVE-2026-34769 Electronjs Electron | HIGH7.7 | Electronjs Electron | CWE-88 | 0.4% | Apr 4, 2026 |
| CVE-2026-22168 Openclaw | HIGH7.1 | Openclaw | CWE-88 | 0.4% | Mar 18, 2026 |
| CVE-2026-26194 Gogs | HIGH8.8 | Gogs | CWE-88 | 0.5% | Mar 5, 2026 |
| CVE-2026-27947 Intermesh Group-Office | CRITICAL9.4 | Intermesh Group-Office | CWE-88 | 1.0% | Feb 27, 2026 |
| CVE-2026-27613 Ritlabs Tinyweb | CRITICAL10.0 | Ritlabs Tinyweb | CWE-78 OS Command Injection | 1.4% | Feb 25, 2026 |
| CVE-2026-27208 Bleon-Ethical Api-Gateway-Deploy | CRITICAL9.2 | Bleon-Ethical Api-Gateway-Deploy | CWE-78 OS Command Injection | 1.2% | Feb 24, 2026 |
| CVE-2025-70327 Totolink X5000r Firmware | CRITICAL9.8 | Totolink X5000r Firmware | CWE-88 | 0.7% | Feb 23, 2026 |
| CVE-2026-25134 Group-Office Group Office | CRITICAL9.4 | Group-Office Group Office | CWE-88 | 0.9% | Feb 2, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications