2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
184 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-0322 Exploited Palo Alto Networks PAN-OS | HIGH8.6 | Palo Alto Networks PAN-OS | CWE-94 Code Injection | n/a | Oct 14, 2026 |
| CVE-2026-110445 the affected product | HIGH8.6 | the affected product | CWE-94 Code Injection | 0.6% | Oct 14, 2026 |
| CVE-2026-110444 the affected product | HIGH8.6 | the affected product | CWE-94 Code Injection | 0.6% | Oct 14, 2026 |
| CVE-2026-92097 the affected product | CRITICAL9.1 | the affected product | CWE-94 Code Injection | 0.5% | Oct 14, 2026 |
| CVE-2026-63146 the affected product | CRITICAL9.3 | the affected product | CWE-94 Code Injection | 0.7% | Oct 13, 2026 |
| CVE-2026-82108 Ibm Datastage On Cloud Pak For Data | HIGH8.8 | Ibm Datastage On Cloud Pak For Data | CWE-94 Code Injection | 0.4% | Oct 12, 2026 |
| CVE-2026-109199 the affected product | HIGH8.7 | the affected product | CWE-94 Code Injection | 0.4% | Oct 12, 2026 |
| CVE-2026-93449 Langflow | HIGH8.5 | Langflow | CWE-94 Code Injection | 0.7% | Oct 7, 2026 |
| CVE-2026-93445 Langflow | HIGH8.1 | Langflow | CWE-94 Code Injection | 0.7% | Oct 7, 2026 |
| CVE-2026-93443 Langflow | HIGH7.5 | Langflow | CWE-94 Code Injection | 0.7% | Oct 7, 2026 |
| CVE-2026-106509 Linuxfoundation Backstage Plugin-Techdocs-Node | HIGH7.7 | Linuxfoundation Backstage Plugin-Techdocs-Node | CWE-94 Code Injection | 0.4% | Oct 6, 2026 |
| CVE-2026-82531 the affected product | CRITICAL9.2 | the affected product | CWE-94 Code Injection | 0.8% | Oct 6, 2026 |
| CVE-2026-86131 Watchguard Fireware | CRITICAL9.2 | Watchguard Fireware | CWE-94 Code Injection | 0.4% | Sep 30, 2026 |
| CVE-2026-102425 Balbooa Forms | CRITICAL9.5 | Balbooa Forms | CWE-94 Code Injection | 0.4% | Sep 29, 2026 |
| CVE-2026-96755 the affected product | CRITICAL9.3 | the affected product | CWE-94 Code Injection | 0.4% | Sep 23, 2026 |
| CVE-2026-89276 Adobe Campaign | CRITICAL9.9 | Adobe Campaign | CWE-94 Code Injection | 0.5% | Sep 22, 2026 |
| CVE-2026-77271 Mcp-Atlassian Mcp Atlassian | HIGH8.3 | Mcp-Atlassian Mcp Atlassian | CWE-22 Path Traversal | 0.5% | Sep 22, 2026 |
| CVE-2026-92126 Jenkins Script Security | HIGH8.5 | Jenkins Script Security | CWE-470 | 0.6% | Sep 16, 2026 |
| CVE-2026-91719 Google Chrome | HIGH8.1 | Google Chrome | CWE-94 Code Injection | 0.2% | Sep 15, 2026 |
| CVE-2026-86083 N8n | HIGH7.7 | N8n | CWE-94 Code Injection | 0.7% | Sep 8, 2026 |
| CVE-2026-86076 N8n | HIGH8.7 | N8n | CWE-94 Code Injection | 0.8% | Sep 8, 2026 |
| CVE-2026-86730 the affected product | HIGH8.7 | the affected product | CWE-94 Code Injection | 0.7% | Sep 8, 2026 |
| CVE-2026-85169 N8n | HIGH8.7 | N8n | CWE-94 Code Injection | 0.9% | Sep 3, 2026 |
| CVE-2026-47727 Triliumnotes Trilium | HIGH8.6 | Triliumnotes Trilium | CWE-94 Code Injection | 0.7% | Aug 27, 2026 |
| CVE-2026-65082 Nvidia Nemoclaw | HIGH7.0 | Nvidia Nemoclaw | CWE-94 Code Injection | 0.2% | Aug 25, 2026 |
| CVE-2026-77077 N8n | HIGH7.2 | N8n | CWE-94 Code Injection | 0.6% | Aug 20, 2026 |
| CVE-2026-77075 N8n | HIGH8.4 | N8n | CWE-94 Code Injection | 0.5% | Aug 20, 2026 |
| CVE-2026-19478 Gitlab | CRITICAL9.4 | Gitlab | CWE-94 Code Injection | 60.2% | Aug 17, 2026 |
| CVE-2026-73487 Flowiseai Flowise | CRITICAL9.0 | Flowiseai Flowise | CWE-94 Code Injection | 1.0% | Aug 13, 2026 |
| CVE-2026-73486 Flowiseai Flowise | CRITICAL9.0 | Flowiseai Flowise | CWE-94 Code Injection | 0.7% | Aug 13, 2026 |
| CVE-2026-73485 Flowiseai Flowise | CRITICAL9.0 | Flowiseai Flowise | CWE-94 Code Injection | 0.6% | Aug 13, 2026 |
| CVE-2026-73032 the affected product | CRITICAL9.4 | the affected product | CWE-94 Code Injection | 0.6% | Aug 11, 2026 |
| CVE-2026-70338 Microsoft Powershell | HIGH7.8 | Microsoft Powershell | CWE-94 Code Injection | 0.4% | Aug 11, 2026 |
| CVE-2026-70336 Microsoft Visual Studio Code | HIGH8.8 | Microsoft Visual Studio Code | CWE-94 Code Injection | 0.8% | Aug 11, 2026 |
| CVE-2026-73076 Vim | HIGH8.4 | Vim | CWE-94 Code Injection | 0.1% | Aug 11, 2026 |
| CVE-2026-72765 N8n | HIGH8.7 | N8n | CWE-94 Code Injection | 0.9% | Aug 11, 2026 |
| CVE-2026-66738 the affected product | HIGH7.7 | the affected product | CWE-94 Code Injection | 0.6% | Aug 10, 2026 |
| CVE-2026-17603 Sonatype Nexus Repository Manager | HIGH8.7 | Sonatype Nexus Repository Manager | CWE-94 Code Injection | 0.5% | Aug 7, 2026 |
| CVE-2026-9196 Langflow | HIGH8.1 | Langflow | CWE-94 Code Injection | 0.5% | Aug 5, 2026 |
| CVE-2026-17633 Langflow | HIGH8.5 | Langflow | CWE-94 Code Injection | 0.7% | Aug 5, 2026 |
| CVE-2026-17624 Langflow | HIGH8.5 | Langflow | CWE-94 Code Injection | 0.7% | Aug 5, 2026 |
| CVE-2026-70477 Flowiseai Flowise | CRITICAL9.5 | Flowiseai Flowise | CWE-94 Code Injection | 0.8% | Aug 4, 2026 |
| CVE-2026-69264 Flowiseai Flowise | CRITICAL9.4 | Flowiseai Flowise | CWE-94 Code Injection | 1.1% | Aug 4, 2026 |
| CVE-2026-69259 Flowiseai Flowise | CRITICAL9.4 | Flowiseai Flowise | CWE-94 Code Injection | 0.8% | Aug 4, 2026 |
| CVE-2026-69256 Flowiseai Flowise | CRITICAL9.4 | Flowiseai Flowise | CWE-94 Code Injection | 1.0% | Aug 4, 2026 |
| CVE-2026-69255 Flowiseai Flowise | CRITICAL9.2 | Flowiseai Flowise | CWE-94 Code Injection | 0.7% | Aug 4, 2026 |
| CVE-2026-69254 Flowiseai Flowise | CRITICAL9.4 | Flowiseai Flowise | CWE-94 Code Injection | 0.7% | Aug 4, 2026 |
| CVE-2026-69251 Flowiseai Flowise | CRITICAL9.0 | Flowiseai Flowise | CWE-94 Code Injection | 2.7% | Aug 4, 2026 |
| CVE-2026-67340 the affected product | HIGH8.6 | the affected product | CWE-94 Code Injection | 0.9% | Aug 1, 2026 |
| CVE-2026-65906 Jetbrains Teamcity | HIGH8.8 | Jetbrains Teamcity | CWE-94 Code Injection | 0.7% | Jul 23, 2026 |
Page 1 of 4
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications