2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
14 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-85385 Concretecms Concrete Cms | HIGH7.7 | Concretecms Concrete Cms | CWE-79 Cross Site Scripting | 0.5% | Sep 16, 2026 |
| CVE-2026-81895 Concretecms Concrete Cms | HIGH8.5 | Concretecms Concrete Cms | CWE-89 SQL Injection | 0.5% | Sep 15, 2026 |
| CVE-2026-18110 Concretecms Concrete Cms | HIGH8.7 | Concretecms Concrete Cms | CWE-862 Missing Authorization | 0.3% | Sep 15, 2026 |
| CVE-2026-81902 Concretecms Concrete Cms | HIGH7.1 | Concretecms Concrete Cms | CWE-352 Cross Site Request Forgery | 0.2% | Sep 14, 2026 |
| CVE-2026-81901 Concretecms Concrete Cms | HIGH7.2 | Concretecms Concrete Cms | CWE-862 Missing Authorization | 0.4% | Sep 14, 2026 |
| CVE-2026-18119 Concretecms Concrete Cms | HIGH7.0 | Concretecms Concrete Cms | CWE-79 Cross Site Scripting | 0.3% | Sep 14, 2026 |
| CVE-2026-8428 Concretecms Concrete Cms | HIGH7.5 | Concretecms Concrete Cms | CWE-352 Cross Site Request Forgery | 0.2% | May 21, 2026 |
| CVE-2026-8426 Concretecms Concrete Cms | HIGH7.5 | Concretecms Concrete Cms | CWE-352 Cross Site Request Forgery | 0.3% | May 21, 2026 |
| CVE-2026-8421 Concretecms Concrete Cms | HIGH7.5 | Concretecms Concrete Cms | CWE-352 Cross Site Request Forgery | 0.3% | May 21, 2026 |
| CVE-2026-8417 Concretecms Concrete Cms | HIGH7.5 | Concretecms Concrete Cms | CWE-352 Cross Site Request Forgery | 0.2% | May 21, 2026 |
| CVE-2026-8350 Concretecms Concrete Cms | HIGH7.5 | Concretecms Concrete Cms | CWE-863 Incorrect Authorization | 0.5% | May 21, 2026 |
| CVE-2026-8135 Concretecms Concrete Cms | HIGH8.9 | Concretecms Concrete Cms | CWE-502 Deserialization of Untrusted Data | 0.7% | May 21, 2026 |
| CVE-2026-8134 Concretecms Concrete Cms | CRITICAL9.4 | Concretecms Concrete Cms | CWE-23 | 1.1% | May 21, 2026 |
| CVE-2026-3452 Concretecms Concrete Cms | HIGH8.9 | Concretecms Concrete Cms | CWE-502 Deserialization of Untrusted Data | 0.9% | Mar 4, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications