2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
315 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-15090 the affected product | HIGH7.5 | the affected product | CWE-89 SQL Injection | n/a | Oct 15, 2026 |
| CVE-2026-101997 the affected product | CRITICAL9.2 | the affected product | CWE-89 SQL Injection | n/a | Oct 14, 2026 |
| CVE-2026-97668 the affected product | CRITICAL9.8 | the affected product | CWE-89 SQL Injection | 0.4% | Oct 14, 2026 |
| CVE-2026-102251 the affected product | HIGH7.5 | the affected product | CWE-89 SQL Injection | 0.4% | Oct 14, 2026 |
| CVE-2026-63165 the affected product | HIGH8.6 | the affected product | CWE-89 SQL Injection | 0.3% | Oct 13, 2026 |
| CVE-2026-63152 the affected product | HIGH8.6 | the affected product | CWE-89 SQL Injection | 0.3% | Oct 13, 2026 |
| CVE-2026-110083 the affected product | HIGH7.1 | the affected product | CWE-89 SQL Injection | 0.3% | Oct 13, 2026 |
| CVE-2026-89197 the affected product | HIGH8.7 | the affected product | CWE-89 SQL Injection | 0.4% | Oct 13, 2026 |
| CVE-2026-109608 the affected product | HIGH8.7 | the affected product | CWE-89 SQL Injection | 0.3% | Oct 12, 2026 |
| CVE-2026-108107 the affected product | CRITICAL9.3 | the affected product | CWE-89 SQL Injection | 0.4% | Oct 9, 2026 |
| CVE-2026-84209 Ibm Guardium Data Protection | HIGH8.1 | Ibm Guardium Data Protection | CWE-89 SQL Injection | 0.3% | Oct 8, 2026 |
| CVE-2026-81932 Ibm Guardium Data Protection | HIGH8.6 | Ibm Guardium Data Protection | CWE-89 SQL Injection | 0.3% | Oct 8, 2026 |
| CVE-2026-105856 Payloadcms Payload | HIGH8.6 | Payloadcms Payload | CWE-89 SQL Injection | 0.3% | Oct 6, 2026 |
| CVE-2026-102428 Ordasoft Joomla Cck | CRITICAL9.3 | Ordasoft Joomla Cck | CWE-89 SQL Injection | 0.3% | Oct 5, 2026 |
| CVE-2026-85215 the affected product | HIGH7.1 | the affected product | CWE-89 SQL Injection | 0.2% | Oct 2, 2026 |
| CVE-2026-76570 Joomcode Jc Tables | CRITICAL10.0 | Joomcode Jc Tables | CWE-89 SQL Injection | 0.5% | Sep 30, 2026 |
| CVE-2026-101110 Ordasoft Book Library | CRITICAL9.3 | Ordasoft Book Library | CWE-89 SQL Injection | 0.3% | Sep 28, 2026 |
| CVE-2026-77874 the affected product | HIGH8.6 | the affected product | CWE-89 SQL Injection | 0.4% | Sep 24, 2026 |
| CVE-2026-82009 Adobe Campaign | CRITICAL9.1 | Adobe Campaign | CWE-89 SQL Injection | 1.0% | Sep 22, 2026 |
| CVE-2026-81626 Ibm Guardium Data Protection | HIGH8.6 | Ibm Guardium Data Protection | CWE-89 SQL Injection | 0.4% | Sep 18, 2026 |
| CVE-2026-81895 Concretecms Concrete Cms | HIGH8.5 | Concretecms Concrete Cms | CWE-89 SQL Injection | 0.5% | Sep 15, 2026 |
| CVE-2026-9163 the affected product | CRITICAL9.8 | the affected product | CWE-89 SQL Injection | 0.5% | Sep 10, 2026 |
| CVE-2026-78623 Okta Access Gateway | HIGH7.7 | Okta Access Gateway | CWE-89 SQL Injection | 0.4% | Sep 8, 2026 |
| CVE-2026-77098 Commvault | HIGH8.8 | Commvault | CWE-89 SQL Injection | 0.5% | Sep 8, 2026 |
| CVE-2026-18198 the affected product | HIGH8.8 | the affected product | CWE-89 SQL Injection | 0.2% | Sep 4, 2026 |
| CVE-2026-85155 the affected product | HIGH8.7 | the affected product | CWE-89 SQL Injection | 0.5% | Sep 3, 2026 |
| CVE-2026-77071 N8n | HIGH7.1 | N8n | CWE-89 SQL Injection | 0.6% | Aug 20, 2026 |
| CVE-2026-70422 Dell Openmanage Enterprise | HIGH8.1 | Dell Openmanage Enterprise | CWE-89 SQL Injection | 0.4% | Aug 19, 2026 |
| CVE-2026-56088 Dell Openmanage Enterprise | HIGH7.1 | Dell Openmanage Enterprise | CWE-89 SQL Injection | 0.4% | Aug 19, 2026 |
| CVE-2026-73663 Sangoma Freepbx | CRITICAL9.3 | Sangoma Freepbx | CWE-89 SQL Injection | 0.4% | Aug 13, 2026 |
| CVE-2026-16961 Ibm I | HIGH7.6 | Ibm I | CWE-89 SQL Injection | 0.5% | Aug 13, 2026 |
| CVE-2024-58374 the affected product | HIGH8.7 | the affected product | CWE-89 SQL Injection | 0.7% | Aug 13, 2026 |
| CVE-2026-73332 the affected product | CRITICAL9.2 | the affected product | CWE-89 SQL Injection | 0.4% | Aug 12, 2026 |
| CVE-2026-67579 Ash-Hq Ash Framework | HIGH7.5 | Ash-Hq Ash Framework | CWE-89 SQL Injection | 0.6% | Aug 12, 2026 |
| CVE-2026-17111 Ibm I | HIGH7.6 | Ibm I | CWE-89 SQL Injection | 0.5% | Aug 12, 2026 |
| CVE-2026-17418 Ibm I | HIGH8.5 | Ibm I | CWE-89 SQL Injection | 0.3% | Aug 12, 2026 |
| CVE-2026-17351 Pgadmin 4 | CRITICAL9.4 | Pgadmin 4 | CWE-89 SQL Injection | 0.5% | Jul 31, 2026 |
| CVE-2026-4978 the affected product | CRITICAL9.8 | the affected product | CWE-89 SQL Injection | 0.5% | Jul 30, 2026 |
| CVE-2026-17543 Php | HIGH8.1 | Php | CWE-89 SQL Injection | 0.3% | Jul 30, 2026 |
| CVE-2026-65890 Balbooa Gridbox | CRITICAL9.2 | Balbooa Gridbox | CWE-89 SQL Injection | 0.5% | Jul 29, 2026 |
| CVE-2026-50736 Enterprisedb Pglogical | CRITICAL9.0 | Enterprisedb Pglogical | CWE-89 SQL Injection | 0.4% | Jul 28, 2026 |
| CVE-2026-15829 Google Mcp Toolbox For Databases | HIGH8.6 | Google Mcp Toolbox For Databases | CWE-89 SQL Injection | 0.2% | Jul 21, 2026 |
| CVE-2026-9586 Exploited Sangoma Switchvox | CRITICAL9.3 | Sangoma Switchvox | CWE-89 SQL Injection | 19.0% | Jul 17, 2026 |
| CVE-2026-8297 the affected product | CRITICAL9.8 | the affected product | CWE-89 SQL Injection | 0.5% | Jul 17, 2026 |
| CVE-2026-62238 Openremote | HIGH7.2 | Openremote | CWE-89 SQL Injection | 0.5% | Jul 17, 2026 |
| CVE-2026-48324 Adobe Coldfusion | CRITICAL9.1 | Adobe Coldfusion | CWE-89 SQL Injection | 1.1% | Jul 14, 2026 |
| CVE-2026-47296 Microsoft Sql Server 2016 | HIGH7.5 | Microsoft Sql Server 2016 | CWE-89 SQL Injection | 0.7% | Jul 14, 2026 |
| CVE-2026-62390 Apache Kylin | CRITICAL9.8 | Apache Kylin | CWE-89 SQL Injection | 0.7% | Jul 14, 2026 |
| CVE-2026-56292 Acymailing | CRITICAL9.2 | Acymailing | CWE-89 SQL Injection | 1.4% | Jul 9, 2026 |
| CVE-2026-9074 Ibm Api Connect | CRITICAL9.1 | Ibm Api Connect | CWE-89 SQL Injection | 0.5% | Jul 8, 2026 |
Page 1 of 7
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications