2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
14 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-88027 Mongodb Laravel Mongodb | HIGH7.1 | Mongodb Laravel Mongodb | CWE-943 | 0.3% | Sep 10, 2026 |
| CVE-2026-77070 N8n | HIGH7.1 | N8n | CWE-943 | 0.5% | Aug 20, 2026 |
| CVE-2026-76254 Splunk | HIGH7.5 | Splunk | CWE-943 | 0.4% | Aug 19, 2026 |
| CVE-2026-40141 Beyondtrust Privileged Remote Access | HIGH8.5 | Beyondtrust Privileged Remote Access | CWE-943 | 0.5% | Jul 6, 2026 |
| CVE-2026-54350 Budibase | CRITICAL10.0 | Budibase | CWE-89 SQL Injection | 0.5% | Jun 26, 2026 |
| CVE-2026-47835 Vmware Spring Ai | HIGH8.6 | Vmware Spring Ai | CWE-943 | 0.4% | Jun 15, 2026 |
| CVE-2026-27886 Strapi | CRITICAL9.2 | Strapi | CWE-22 Path Traversal | 2.5% | May 14, 2026 |
| CVE-2026-41274 Flowiseai Flowise | CRITICAL9.3 | Flowiseai Flowise | CWE-943 | 0.7% | Apr 23, 2026 |
| CVE-2026-33980 Pab1it0 Azure Data Explorer Mcp Server | HIGH8.3 | Pab1it0 Azure Data Explorer Mcp Server | CWE-943 | 0.4% | Mar 27, 2026 |
| CVE-2026-32248 Parseplatform Parse-Server | CRITICAL9.3 | Parseplatform Parse-Server | CWE-943 | 1.0% | Mar 12, 2026 |
| CVE-2026-29793 Feathersjs Feathers | CRITICAL9.3 | Feathersjs Feathers | CWE-943 | 0.6% | Mar 10, 2026 |
| CVE-2026-30941 Parseplatform Parse-Server | HIGH8.7 | Parseplatform Parse-Server | CWE-943 | 0.5% | Mar 10, 2026 |
| CVE-2026-25514 Facturascripts | HIGH8.7 | Facturascripts | CWE-20 Improper Input Validation | 0.6% | Feb 4, 2026 |
| CVE-2026-25513 Facturascripts | HIGH8.3 | Facturascripts | CWE-20 Improper Input Validation | 0.6% | Feb 4, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications