2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
50 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-0322 Exploited Palo Alto Networks PAN-OS | HIGH8.6 | Palo Alto Networks PAN-OS | CWE-94 Code Injection | n/a | Oct 14, 2026 |
| CVE-2026-88779 Exploited Citrix NetScaler | HIGH8.7 | Citrix NetScaler | CWE-119 Memory Buffer Errors | 0.6% | Oct 4, 2026 |
| CVE-2026-102490 Exploited Zammad GmbH Zammad | CRITICAL9.4 | Zammad GmbH Zammad | CWE-269 Improper Privilege Management | 0.5% | Sep 30, 2026 |
| CVE-2026-102489 Exploited Zammad GmbH Zammad | CRITICAL9.4 | Zammad GmbH Zammad | CWE-384 | 1.3% | Sep 30, 2026 |
| CVE-2026-88772 Exploited Citrix NetScaler | CRITICAL9.5 | Citrix NetScaler | CWE-119 Memory Buffer Errors | 1.3% | Sep 27, 2026 |
| CVE-2026-88771 Exploited Citrix NetScaler | CRITICAL9.5 | Citrix NetScaler | CWE-20 Improper Input Validation | 1.1% | Sep 27, 2026 |
| CVE-2026-86218 Exploited N-able N-central | CRITICAL10.0 | N-able N-central | CWE-96 | 14.5% | Sep 6, 2026 |
| CVE-2026-86060 Exploited MikroTik RouterOS | CRITICAL9.2 | MikroTik RouterOS | CWE-88 | 6.4% | Sep 5, 2026 |
| CVE-2026-67277 Exploited MikroTik RouterOS | HIGH8.8 | MikroTik RouterOS | CWE-306 Missing Authentication | 1.6% | Sep 5, 2026 |
| CVE-2026-82078 Exploited PaperCut NG/MF | CRITICAL9.4 | PaperCut NG/MF | CWE-470 | 63.5% | Aug 28, 2026 |
| CVE-2026-81578 Exploited PaperCut NG/MF | HIGH8.8 | PaperCut NG/MF | CWE-305 | 85.6% | Aug 28, 2026 |
| CVE-2026-19490 Exploited Citrix NetScaler | CRITICAL9.3 | Citrix NetScaler | CWE-288 Authentication Bypass via Alternate Path | 23.2% | Aug 19, 2026 |
| CVE-2026-18577 Exploited N-able N-central | HIGH8.2 | N-able N-central | CWE-288 Authentication Bypass via Alternate Path | 14.6% | Aug 2, 2026 |
| CVE-2026-18556 Exploited N-able N-central | HIGH8.2 | N-able N-central | CWE-288 Authentication Bypass via Alternate Path | 7.9% | Aug 1, 2026 |
| CVE-2026-42016 Exploited JFrog Artifactory | HIGH8.1 | JFrog Artifactory | CWE-863 Incorrect Authorization | 8.6% | Jul 27, 2026 |
| CVE-2026-16232 Exploited Check Point SmartConsole | CRITICAL9.3 | Check Point SmartConsole | CWE-287 Improper Authentication | 78.0% | Jul 22, 2026 |
| CVE-2026-9586 Exploited Sangoma Switchvox | CRITICAL9.3 | Sangoma Switchvox | CWE-89 SQL Injection | 19.0% | Jul 17, 2026 |
| CVE-2026-56291 Exploited Balbooa Forms | CRITICAL10.0 | Balbooa Forms | CWE-434 Unrestricted File Upload | 14.9% | Jul 9, 2026 |
| CVE-2026-59822 Exploited BerriAI LiteLLM | HIGH8.8 | BerriAI LiteLLM | CWE-287 Improper Authentication | 0.8% | Jul 8, 2026 |
| CVE-2026-8452 Exploited Citrix NetScaler ADC and NetScaler Gateway | HIGH8.8 | Citrix NetScaler ADC and NetScaler Gateway | CWE-119 Memory Buffer Errors | 1.0% | Jun 30, 2026 |
| CVE-2026-56290 Exploited Joomlack Page Builder | CRITICAL10.0 | Joomlack Page Builder | CWE-434 Unrestricted File Upload | 30.9% | Jun 29, 2026 |
| CVE-2026-48939 Exploited iCagenda | CRITICAL10.0 | iCagenda | CWE-434 Unrestricted File Upload | 20.1% | Jun 20, 2026 |
| CVE-2026-48908 Exploited JoomShaper SP Page Builder | CRITICAL10.0 | JoomShaper SP Page Builder | CWE-434 Unrestricted File Upload | 88.5% | Jun 20, 2026 |
| CVE-2026-12569 Exploited PTC Windchill and FlexPLM | CRITICAL9.3 | PTC Windchill and FlexPLM | CWE-20 Improper Input Validation | 46.0% | Jun 18, 2026 |
| CVE-2026-48907 Exploited Widget Factory Joomla Content Editor | CRITICAL10.0 | Widget Factory Joomla Content Editor | CWE-284 Improper Access Control | 16.2% | Jun 5, 2026 |
| CVE-2026-8037 Exploited Progress LoadMaster | CRITICAL9.6 | Progress LoadMaster | CWE-77 Command Injection | 77.4% | Jun 4, 2026 |
| CVE-2026-48027 Exploited Nx Console | CRITICAL9.3 | Nx Console | CWE-506 | 1.3% | May 27, 2026 |
| CVE-2026-48172 Exploited LiteSpeed cPanel Plugin | CRITICAL10.0 | LiteSpeed cPanel Plugin | CWE-266 | 1.0% | May 21, 2026 |
| CVE-2026-0257 Exploited Palo Alto Networks PAN-OS | HIGH7.8 | Palo Alto Networks PAN-OS | CWE-565 | 96.9% | May 13, 2026 |
| CVE-2026-42271 Exploited BerriAI LiteLLM | HIGH8.7 | BerriAI LiteLLM | CWE-77 Command Injection | 92.6% | May 8, 2026 |
| CVE-2026-42208 Exploited BerriAI LiteLLM | CRITICAL9.3 | BerriAI LiteLLM | CWE-89 SQL Injection | 5.8% | May 8, 2026 |
| CVE-2026-0300 Exploited Palo Alto Networks PAN-OS | CRITICAL9.3 | Palo Alto Networks PAN-OS | CWE-787 Out of Bounds Write | 31.7% | May 6, 2026 |
| CVE-2026-39987 Exploited Marimo | CRITICAL9.3 | Marimo | CWE-306 Missing Authentication | 37.9% | Apr 9, 2026 |
| CVE-2026-33634 Exploited Aquasecurity Trivy | CRITICAL9.4 | Aquasecurity Trivy | CWE-506 | 1.7% | Mar 23, 2026 |
| CVE-2026-3055 Exploited Citrix NetScaler | CRITICAL9.3 | Citrix NetScaler | CWE-125 Out of Bounds Read | 4.0% | Mar 23, 2026 |
| CVE-2026-33017 Exploited Langflow | CRITICAL9.3 | Langflow | CWE-94 Code Injection | 24.8% | Mar 20, 2026 |
| CVE-2026-3910 Exploited Google Chromium V8 | HIGH8.8 | Google Chromium V8 | CWE-94 Code Injection | 1.1% | Mar 13, 2026 |
| CVE-2026-3909 Exploited Google Skia | HIGH8.8 | Google Skia | CWE-787 Out of Bounds Write | 2.3% | Mar 13, 2026 |
| CVE-2026-20127 Exploited Cisco Catalyst SD-WAN Controller and Manager | CRITICAL10.0 | Cisco Catalyst SD-WAN Controller and Manager | CWE-287 Improper Authentication | 88.5% | Feb 25, 2026 |
| CVE-2026-22769 Exploited Dell RecoverPoint for Virtual Machines (RP4VMs) | CRITICAL10.0 | Dell RecoverPoint for Virtual Machines (RP4VMs) | CWE-798 Hard Coded Credentials | 13.3% | Feb 17, 2026 |
| CVE-2026-2441 Exploited Google Chromium | HIGH8.8 | Google Chromium | CWE-416 Use After Free | 55.0% | Feb 13, 2026 |
| CVE-2026-25108 Exploited Soliton Systems K.K FileZen | HIGH8.7 | Soliton Systems K.K FileZen | CWE-78 OS Command Injection | 5.2% | Feb 13, 2026 |
| CVE-2026-1603 Exploited Ivanti Endpoint Manager (EPM) | HIGH8.6 | Ivanti Endpoint Manager (EPM) | CWE-288 Authentication Bypass via Alternate Path | 88.3% | Feb 10, 2026 |
| CVE-2026-1731 Exploited BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | CRITICAL9.9 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | CWE-78 OS Command Injection | 91.7% | Feb 6, 2026 |
| CVE-2025-15556 Exploited Notepad++ | HIGH7.7 | Notepad++ | CWE-494 | 1.8% | Feb 3, 2026 |
| CVE-2025-40536 Exploited SolarWinds Web Help Desk | HIGH8.1 | SolarWinds Web Help Desk | CWE-693 | 73.6% | Jan 28, 2026 |
| CVE-2026-24423 Exploited SmarterTools SmarterMail | CRITICAL9.3 | SmarterTools SmarterMail | CWE-306 Missing Authentication | 88.2% | Jan 23, 2026 |
| CVE-2026-23760 Exploited SmarterTools SmarterMail | CRITICAL9.3 | SmarterTools SmarterMail | CWE-288 Authentication Bypass via Alternate Path | 96.5% | Jan 22, 2026 |
| CVE-2026-20045 Exploited Cisco Unified Communications Manager | HIGH8.2 | Cisco Unified Communications Manager | CWE-94 Code Injection | 4.5% | Jan 21, 2026 |
| CVE-2025-25249 Exploited Fortinet Multiple Products | HIGH8.1 | Fortinet Multiple Products | CWE-122 Heap Buffer Overflow | 3.8% | Jan 13, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications