2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
142 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-3712 the affected product | HIGH7.3 | the affected product | CWE-918 Server Side Request Forgery | n/a | Oct 15, 2026 |
| CVE-2026-110868 the affected product | HIGH8.4 | the affected product | CWE-918 Server Side Request Forgery | n/a | Oct 14, 2026 |
| CVE-2026-110628 the affected product | CRITICAL9.2 | the affected product | CWE-918 Server Side Request Forgery | n/a | Oct 14, 2026 |
| CVE-2026-110220 the affected product | HIGH7.1 | the affected product | CWE-918 Server Side Request Forgery | 0.3% | Oct 13, 2026 |
| CVE-2026-75888 the affected product | HIGH7.7 | the affected product | CWE-918 Server Side Request Forgery | 0.2% | Oct 12, 2026 |
| CVE-2026-78024 Dell Policy Manager For Secure Connect Gateway | HIGH7.7 | Dell Policy Manager For Secure Connect Gateway | CWE-918 Server Side Request Forgery | 0.2% | Oct 9, 2026 |
| CVE-2026-96890 Github Enterprise Server | HIGH8.7 | Github Enterprise Server | CWE-918 Server Side Request Forgery | 0.5% | Oct 6, 2026 |
| CVE-2026-92222 Joomla! | HIGH8.9 | Joomla! | CWE-918 Server Side Request Forgery | 0.2% | Sep 29, 2026 |
| CVE-2026-102267 Pyjwt Project Pyjwt | HIGH7.4 | Pyjwt Project Pyjwt | CWE-200 Information Exposure | 0.2% | Sep 28, 2026 |
| CVE-2026-81549 Ibm Datastage On Cloud Pak For Data | CRITICAL9.6 | Ibm Datastage On Cloud Pak For Data | CWE-918 Server Side Request Forgery | 0.3% | Sep 24, 2026 |
| CVE-2026-18066 Ibm Financial Transaction Manager | HIGH7.9 | Ibm Financial Transaction Manager | CWE-918 Server Side Request Forgery | 0.1% | Sep 22, 2026 |
| CVE-2026-77987 Github Enterprise Server | CRITICAL9.3 | Github Enterprise Server | CWE-208 | 0.9% | Sep 22, 2026 |
| CVE-2026-83660 Adobe Campaign | CRITICAL9.9 | Adobe Campaign | CWE-918 Server Side Request Forgery | 0.3% | Sep 22, 2026 |
| CVE-2026-82443 Adobe Campaign | CRITICAL9.6 | Adobe Campaign | CWE-918 Server Side Request Forgery | 0.4% | Sep 22, 2026 |
| CVE-2026-77274 Mcp-Atlassian Mcp Atlassian | HIGH8.8 | Mcp-Atlassian Mcp Atlassian | CWE-918 Server Side Request Forgery | 0.3% | Sep 22, 2026 |
| CVE-2026-77261 Mcp-Atlassian Mcp Atlassian | HIGH7.1 | Mcp-Atlassian Mcp Atlassian | CWE-918 Server Side Request Forgery | 0.3% | Sep 22, 2026 |
| CVE-2026-92719 the affected product | HIGH8.7 | the affected product | CWE-918 Server Side Request Forgery | 0.5% | Sep 16, 2026 |
| CVE-2026-88056 Angular | HIGH8.6 | Angular | CWE-918 Server Side Request Forgery | 0.5% | Sep 10, 2026 |
| CVE-2026-80123 Dell Secure Connect Gateway | HIGH7.3 | Dell Secure Connect Gateway | CWE-918 Server Side Request Forgery | 0.3% | Sep 9, 2026 |
| CVE-2026-86419 Misp-Project Misp | HIGH7.0 | Misp-Project Misp | CWE-200 Information Exposure | 0.4% | Sep 7, 2026 |
| CVE-2026-77822 Ibm Contextforge | HIGH8.2 | Ibm Contextforge | CWE-918 Server Side Request Forgery | 0.4% | Sep 4, 2026 |
| CVE-2026-19305 Langflow | HIGH8.6 | Langflow | CWE-918 Server Side Request Forgery | 0.3% | Sep 4, 2026 |
| CVE-2026-65818 Microsoft Power Platform | HIGH8.5 | Microsoft Power Platform | CWE-918 Server Side Request Forgery | 0.6% | Sep 3, 2026 |
| CVE-2026-85180 the affected product | HIGH8.7 | the affected product | CWE-918 Server Side Request Forgery | 0.5% | Sep 3, 2026 |
| CVE-2026-76851 Github Enterprise Server | HIGH7.7 | Github Enterprise Server | CWE-918 Server Side Request Forgery | 0.8% | Sep 1, 2026 |
| CVE-2026-18730 Github Enterprise Server | HIGH8.2 | Github Enterprise Server | CWE-918 Server Side Request Forgery | 0.3% | Sep 1, 2026 |
| CVE-2026-75871 Gitlab | HIGH8.2 | Gitlab | CWE-918 Server Side Request Forgery | 0.3% | Aug 27, 2026 |
| CVE-2026-47879 Vmware Spring Cloud Gateway | HIGH7.7 | Vmware Spring Cloud Gateway | CWE-918 Server Side Request Forgery | 0.3% | Aug 27, 2026 |
| CVE-2026-77775 the affected product | HIGH7.7 | the affected product | CWE-918 Server Side Request Forgery | 0.6% | Aug 21, 2026 |
| CVE-2026-66800 Microsoft Azure Data Factory | HIGH8.6 | Microsoft Azure Data Factory | CWE-918 Server Side Request Forgery | 1.0% | Aug 20, 2026 |
| CVE-2026-75898 the affected product | HIGH8.4 | the affected product | CWE-918 Server Side Request Forgery | 0.4% | Aug 18, 2026 |
| CVE-2026-72777 the affected product | HIGH7.7 | the affected product | CWE-918 Server Side Request Forgery | 0.4% | Aug 13, 2026 |
| CVE-2026-58612 Microsoft Powershell | HIGH7.4 | Microsoft Powershell | CWE-918 Server Side Request Forgery | 0.9% | Aug 11, 2026 |
| CVE-2026-13739 Commvault | HIGH8.8 | Commvault | CWE-918 Server Side Request Forgery | 0.4% | Aug 11, 2026 |
| CVE-2026-17617 Ibm Application Gateway Operator | HIGH8.5 | Ibm Application Gateway Operator | CWE-918 Server Side Request Forgery | 0.3% | Aug 5, 2026 |
| CVE-2026-69257 Flowiseai Flowise | HIGH7.6 | Flowiseai Flowise | CWE-918 Server Side Request Forgery | 0.4% | Aug 4, 2026 |
| CVE-2026-18381 Redhat Cost Management Metrics Operator | HIGH7.6 | Redhat Cost Management Metrics Operator | CWE-918 Server Side Request Forgery | 0.4% | Jul 30, 2026 |
| CVE-2026-56167 Microsoft Azure Ai Search | HIGH8.5 | Microsoft Azure Ai Search | CWE-918 Server Side Request Forgery | 0.5% | Jul 24, 2026 |
| CVE-2026-53727 Premailer Css Parser | HIGH8.9 | Premailer Css Parser | CWE-918 Server Side Request Forgery | 0.5% | Jul 17, 2026 |
| CVE-2026-62643 Roundcube Webmail | HIGH7.2 | Roundcube Webmail | CWE-918 Server Side Request Forgery | 0.2% | Jul 14, 2026 |
| CVE-2026-56261 Kidocode Crawl4ai | CRITICAL9.2 | Kidocode Crawl4ai | CWE-918 Server Side Request Forgery | 0.5% | Jul 10, 2026 |
| CVE-2026-44937 Suse Rancher Fleet | HIGH8.3 | Suse Rancher Fleet | CWE-918 Server Side Request Forgery | 0.4% | Jul 6, 2026 |
| CVE-2026-57993 Microsoft Edge Chromium | HIGH7.4 | Microsoft Edge Chromium | CWE-918 Server Side Request Forgery | 0.9% | Jul 3, 2026 |
| CVE-2026-57100 Microsoft Entra Provisioning Service | CRITICAL9.9 | Microsoft Entra Provisioning Service | CWE-918 Server Side Request Forgery | 0.8% | Jul 2, 2026 |
| CVE-2026-45499 Microsoft Azure Openai | CRITICAL9.9 | Microsoft Azure Openai | CWE-918 Server Side Request Forgery | 0.8% | Jul 2, 2026 |
| CVE-2026-55115 Ui Unifi Protect | CRITICAL9.9 | Ui Unifi Protect | CWE-918 Server Side Request Forgery | 0.5% | Jul 2, 2026 |
| CVE-2026-54401 Ui Unifi Os Server | HIGH7.7 | Ui Unifi Os Server | CWE-918 Server Side Request Forgery | 0.4% | Jul 2, 2026 |
| CVE-2026-11714 Ibm Websphere Application Server | HIGH8.5 | Ibm Websphere Application Server | CWE-918 Server Side Request Forgery | 0.4% | Jun 30, 2026 |
| CVE-2026-11546 Ibm Websphere Application Server | HIGH7.1 | Ibm Websphere Application Server | CWE-918 Server Side Request Forgery | 0.4% | Jun 30, 2026 |
| CVE-2026-54353 Budibase | HIGH8.5 | Budibase | CWE-367 | 0.2% | Jun 26, 2026 |
Page 1 of 3
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications