2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
6 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-44447 Frappe Erpnext | HIGH8.8 | Frappe Erpnext | CWE-89 SQL Injection | 0.5% | May 13, 2026 |
| CVE-2026-44446 Frappe Erpnext | HIGH8.8 | Frappe Erpnext | CWE-89 SQL Injection | 0.5% | May 13, 2026 |
| CVE-2026-31017 Frappe Erpnext | CRITICAL9.1 | Frappe Erpnext | CWE-918 Server Side Request Forgery | 0.4% | Apr 8, 2026 |
| CVE-2026-32954 Frappe Erpnext | HIGH7.1 | Frappe Erpnext | CWE-89 SQL Injection | 0.4% | Mar 20, 2026 |
| CVE-2026-31877 Frappe | CRITICAL9.3 | Frappe | CWE-89 SQL Injection | 0.5% | Mar 11, 2026 |
| CVE-2026-27471 Frappe Erpnext | CRITICAL9.3 | Frappe Erpnext | CWE-284 Improper Access Control | 0.4% | Feb 21, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications