2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
29 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-109186 the affected product | HIGH8.7 | the affected product | CWE-915 | 0.4% | Oct 12, 2026 |
| CVE-2026-105863 Payloadcms Payload | CRITICAL9.2 | Payloadcms Payload | CWE-290 | 0.4% | Oct 6, 2026 |
| CVE-2026-69258 Flowiseai Flowise | HIGH8.8 | Flowiseai Flowise | CWE-639 Insecure Direct Object Reference | 0.7% | Aug 4, 2026 |
| CVE-2026-58477 Dan-In-Ca Sustainable Irrigation Platform | HIGH8.8 | Dan-In-Ca Sustainable Irrigation Platform | CWE-915 | 0.5% | Jul 14, 2026 |
| CVE-2026-54351 Budibase | HIGH8.2 | Budibase | CWE-915 | 0.5% | Jun 26, 2026 |
| CVE-2026-56142 Jetbrains Hub | CRITICAL9.9 | Jetbrains Hub | CWE-915 | 0.6% | Jun 19, 2026 |
| CVE-2026-44495 Axios | HIGH7.0 | Axios | CWE-94 Code Injection | 1.0% | Jun 11, 2026 |
| CVE-2026-46480 Flowiseai Flowise | HIGH7.7 | Flowiseai Flowise | CWE-915 | 0.6% | Jun 8, 2026 |
| CVE-2026-46479 Flowiseai Flowise | HIGH7.7 | Flowiseai Flowise | CWE-915 | 0.6% | Jun 8, 2026 |
| CVE-2026-46478 Flowiseai Flowise | HIGH7.7 | Flowiseai Flowise | CWE-915 | 0.6% | Jun 8, 2026 |
| CVE-2026-46477 Flowiseai Flowise | HIGH7.7 | Flowiseai Flowise | CWE-915 | 0.6% | Jun 8, 2026 |
| CVE-2026-46476 Flowiseai Flowise | HIGH7.7 | Flowiseai Flowise | CWE-915 | 0.6% | Jun 8, 2026 |
| CVE-2026-46475 Flowiseai Flowise | HIGH7.7 | Flowiseai Flowise | CWE-915 | 0.6% | Jun 8, 2026 |
| CVE-2026-46441 Flowiseai Flowise | HIGH7.6 | Flowiseai Flowise | CWE-284 Improper Access Control | 0.4% | Jun 8, 2026 |
| CVE-2026-42863 Flowiseai Flowise | HIGH7.6 | Flowiseai Flowise | CWE-284 Improper Access Control | 0.4% | Jun 8, 2026 |
| CVE-2026-42861 Flowiseai Flowise | HIGH7.6 | Flowiseai Flowise | CWE-284 Improper Access Control | 0.4% | Jun 8, 2026 |
| CVE-2026-42264 Axios | HIGH7.4 | Axios | CWE-1321 Prototype Pollution | 0.8% | May 8, 2026 |
| CVE-2026-41277 Flowiseai Flowise | HIGH7.6 | Flowiseai Flowise | CWE-284 Improper Access Control | 0.5% | Apr 23, 2026 |
| CVE-2026-41267 Flowiseai Flowise | HIGH8.1 | Flowiseai Flowise | CWE-639 Insecure Direct Object Reference | 0.5% | Apr 23, 2026 |
| CVE-2026-34208 Nyariv Sandboxjs | CRITICAL10.0 | Nyariv Sandboxjs | CWE-693 | 0.6% | Apr 6, 2026 |
| CVE-2026-34406 Aptrs | CRITICAL9.4 | Aptrs | CWE-915 | 0.8% | Mar 31, 2026 |
| CVE-2026-33228 Webreflection Flatted | HIGH8.9 | Webreflection Flatted | CWE-1321 Prototype Pollution | 1.0% | Mar 20, 2026 |
| CVE-2026-27953 Collerek Ormar | HIGH7.1 | Collerek Ormar | CWE-20 Improper Input Validation | 0.9% | Mar 19, 2026 |
| CVE-2026-29056 Kanboard | HIGH7.0 | Kanboard | CWE-915 | 0.6% | Mar 18, 2026 |
| CVE-2026-32640 Danthedeckie Simpleeval | HIGH8.7 | Danthedeckie Simpleeval | CWE-94 Code Injection | 0.9% | Mar 16, 2026 |
| CVE-2026-29063 Immutable-Js Immutable | HIGH8.7 | Immutable-Js Immutable | CWE-1321 Prototype Pollution | 1.6% | Mar 6, 2026 |
| CVE-2026-25521 Locutus | CRITICAL9.4 | Locutus | CWE-1321 Prototype Pollution | 0.5% | Feb 4, 2026 |
| CVE-2026-22783 Dfir-Iris Iris | CRITICAL9.6 | Dfir-Iris Iris | CWE-73 | 0.4% | Jan 12, 2026 |
| CVE-2025-61781 Citeum Opencti | HIGH7.1 | Citeum Opencti | CWE-285 Improper Authorization | 0.2% | Jan 5, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications