2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
11 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-102425 Balbooa Forms | CRITICAL9.5 | Balbooa Forms | CWE-94 Code Injection | 0.4% | Sep 29, 2026 |
| CVE-2026-102424 Balbooa Forms | HIGH8.9 | Balbooa Forms | CWE-22 Path Traversal | 0.4% | Sep 29, 2026 |
| CVE-2026-101127 Balbooa Forms | HIGH8.6 | Balbooa Forms | CWE-79 Cross Site Scripting | 0.3% | Sep 29, 2026 |
| CVE-2026-65888 Balbooa Gridbox | CRITICAL10.0 | Balbooa Gridbox | CWE-284 Improper Access Control | 0.5% | Jul 29, 2026 |
| CVE-2026-65887 Balbooa Gridbox | CRITICAL10.0 | Balbooa Gridbox | CWE-284 Improper Access Control | 0.5% | Jul 29, 2026 |
| CVE-2026-65886 Balbooa Gridbox | CRITICAL9.2 | Balbooa Gridbox | CWE-22 Path Traversal | 0.6% | Jul 29, 2026 |
| CVE-2026-65890 Balbooa Gridbox | CRITICAL9.2 | Balbooa Gridbox | CWE-89 SQL Injection | 0.5% | Jul 29, 2026 |
| CVE-2026-65889 Balbooa Gridbox | CRITICAL9.2 | Balbooa Gridbox | CWE-22 Path Traversal | 0.4% | Jul 29, 2026 |
| CVE-2026-65885 Balbooa Gridbox | CRITICAL9.4 | Balbooa Gridbox | CWE-434 Unrestricted File Upload | 0.5% | Jul 29, 2026 |
| CVE-2026-65884 Balbooa Gridbox | CRITICAL10.0 | Balbooa Gridbox | CWE-284 Improper Access Control | 0.5% | Jul 29, 2026 |
| CVE-2026-56291 Exploited Balbooa Forms | CRITICAL10.0 | Balbooa Forms | CWE-434 Unrestricted File Upload | 14.9% | Jul 9, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications