2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
1,190 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-108587 the affected product | CRITICAL9.8 | the affected product | CWE-434 Unrestricted File Upload | n/a | Oct 15, 2026 |
| CVE-2026-110867 the affected product | CRITICAL9.0 | the affected product | CWE-863 Incorrect Authorization | n/a | Oct 14, 2026 |
| CVE-2026-110864 the affected product | CRITICAL9.1 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-110862 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-110858 the affected product | CRITICAL9.2 | the affected product | CWE-88 | n/a | Oct 14, 2026 |
| CVE-2026-110770 the affected product | CRITICAL9.2 | the affected product | CWE-307 | n/a | Oct 14, 2026 |
| CVE-2026-110536 the affected product | CRITICAL9.3 | the affected product | CWE-77 Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-101982 the affected product | CRITICAL9.3 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-101954 the affected product | CRITICAL9.3 | the affected product | CWE-287 Improper Authentication | n/a | Oct 14, 2026 |
| CVE-2026-109439 the affected product | CRITICAL9.3 | the affected product | CWE-306 Missing Authentication | n/a | Oct 14, 2026 |
| CVE-2026-102178 the affected product | CRITICAL9.3 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-102175 the affected product | CRITICAL9.3 | the affected product | CWE-122 Heap Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-102037 the affected product | CRITICAL9.2 | the affected product | CWE-91 | n/a | Oct 14, 2026 |
| CVE-2026-102031 the affected product | CRITICAL9.3 | the affected product | CWE-78 OS Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-101997 the affected product | CRITICAL9.2 | the affected product | CWE-89 SQL Injection | n/a | Oct 14, 2026 |
| CVE-2026-101990 the affected product | CRITICAL9.3 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-101955 the affected product | CRITICAL9.2 | the affected product | CWE-121 Stack Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-101950 the affected product | CRITICAL9.3 | the affected product | CWE-122 Heap Buffer Overflow | n/a | Oct 14, 2026 |
| CVE-2026-110646 the affected product | CRITICAL9.2 | the affected product | CWE-78 OS Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-110643 the affected product | CRITICAL9.3 | the affected product | CWE-78 OS Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-110640 the affected product | CRITICAL9.3 | the affected product | CWE-78 OS Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-110638 the affected product | CRITICAL9.3 | the affected product | CWE-78 OS Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-110636 the affected product | CRITICAL9.3 | the affected product | CWE-78 OS Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-110635 the affected product | CRITICAL9.3 | the affected product | CWE-78 OS Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-110628 the affected product | CRITICAL9.2 | the affected product | CWE-918 Server Side Request Forgery | n/a | Oct 14, 2026 |
| CVE-2026-110616 the affected product | CRITICAL9.2 | the affected product | CWE-306 Missing Authentication | n/a | Oct 14, 2026 |
| CVE-2020-37282 the affected product | CRITICAL9.3 | the affected product | CWE-78 OS Command Injection | n/a | Oct 14, 2026 |
| CVE-2026-104748 the affected product | CRITICAL9.8 | the affected product | CWE-269 Improper Privilege Management | 0.6% | Oct 14, 2026 |
| CVE-2026-104800 the affected product | CRITICAL9.8 | the affected product | CWE-434 Unrestricted File Upload | 1.0% | Oct 14, 2026 |
| CVE-2026-97668 the affected product | CRITICAL9.8 | the affected product | CWE-89 SQL Injection | 0.4% | Oct 14, 2026 |
| CVE-2026-110002 the affected product | CRITICAL9.8 | the affected product | CWE-434 Unrestricted File Upload | 1.0% | Oct 14, 2026 |
| CVE-2026-92097 the affected product | CRITICAL9.1 | the affected product | CWE-94 Code Injection | 0.5% | Oct 14, 2026 |
| CVE-2026-93895 the affected product | CRITICAL9.1 | the affected product | CWE-284 Improper Access Control | 0.4% | Oct 13, 2026 |
| CVE-2026-63160 the affected product | CRITICAL9.1 | the affected product | CWE-522 | 0.3% | Oct 13, 2026 |
| CVE-2026-63146 the affected product | CRITICAL9.3 | the affected product | CWE-94 Code Injection | 0.7% | Oct 13, 2026 |
| CVE-2026-106629 the affected product | CRITICAL9.3 | the affected product | CWE-79 Cross Site Scripting | 0.7% | Oct 13, 2026 |
| CVE-2026-110112 the affected product | CRITICAL9.2 | the affected product | CWE-863 Incorrect Authorization | 0.4% | Oct 13, 2026 |
| CVE-2026-100133 the affected product | CRITICAL9.3 | the affected product | CWE-79 Cross Site Scripting | 0.9% | Oct 13, 2026 |
| CVE-2026-74040 the affected product | CRITICAL9.4 | the affected product | CWE-862 Missing Authorization | 0.6% | Oct 13, 2026 |
| CVE-2026-109520 the affected product | CRITICAL9.3 | the affected product | CWE-266 | 0.2% | Oct 13, 2026 |
| CVE-2026-63354 the affected product | CRITICAL9.4 | the affected product | CWE-79 Cross Site Scripting | 0.4% | Oct 13, 2026 |
| CVE-2026-109110 the affected product | CRITICAL9.3 | the affected product | CWE-77 Command Injection | 2.0% | Oct 13, 2026 |
| CVE-2026-82110 Ibm Datastage On Cloud Pak For Data | CRITICAL9.6 | Ibm Datastage On Cloud Pak For Data | CWE-22 Path Traversal | 0.5% | Oct 12, 2026 |
| CVE-2026-82101 Ibm Datastage On Cloud Pak For Data | CRITICAL9.6 | Ibm Datastage On Cloud Pak For Data | CWE-22 Path Traversal | 0.4% | Oct 12, 2026 |
| CVE-2026-53997 the affected product | CRITICAL9.1 | the affected product | CWE-307 | 0.4% | Oct 12, 2026 |
| CVE-2026-109566 the affected product | CRITICAL9.3 | the affected product | CWE-798 Hard Coded Credentials | 0.4% | Oct 12, 2026 |
| CVE-2026-108929 the affected product | CRITICAL9.4 | the affected product | CWE-74 | 0.4% | Oct 12, 2026 |
| CVE-2026-109423 the affected product | CRITICAL9.1 | the affected product | CWE-295 | 0.2% | Oct 12, 2026 |
| CVE-2026-109422 the affected product | CRITICAL9.2 | the affected product | CWE-749 | 0.5% | Oct 12, 2026 |
| CVE-2026-87744 the affected product | CRITICAL9.1 | the affected product | CWE-425 | 0.3% | Oct 12, 2026 |
Page 1 of 24
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications