2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
320 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-75590 IBM API Connect | HIGH7.2 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-19128 IBM API Connect | HIGH7.5 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-19121 IBM API Connect | HIGH8.3 | IBM API Connect | CWE-290 | n/a | Nov 7, 2026 |
| CVE-2026-18838 IBM API Connect | CRITICAL9.4 | IBM API Connect | CWE-290 | n/a | Nov 7, 2026 |
| CVE-2026-18836 IBM API Connect | CRITICAL9.3 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-18535 IBM API Connect | CRITICAL9.6 | IBM API Connect | CWE-1333 | n/a | Nov 7, 2026 |
| CVE-2026-17411 IBM API Connect | HIGH7.6 | IBM API Connect | CWE-89 SQL Injection | n/a | Nov 7, 2026 |
| CVE-2026-17410 IBM API Connect | CRITICAL9.9 | IBM API Connect | CWE-88 | n/a | Nov 7, 2026 |
| CVE-2026-17409 IBM API Connect | CRITICAL9.4 | IBM API Connect | CWE-178 | n/a | Nov 7, 2026 |
| CVE-2026-17408 IBM API Connect | CRITICAL9.8 | IBM API Connect | CWE-78 OS Command Injection | n/a | Nov 7, 2026 |
| CVE-2026-17407 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-89 SQL Injection | n/a | Nov 7, 2026 |
| CVE-2026-17406 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-17405 IBM API Connect | HIGH8.8 | IBM API Connect | CWE-639 Insecure Direct Object Reference | n/a | Nov 7, 2026 |
| CVE-2026-17404 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-17403 IBM API Connect | CRITICAL9.0 | IBM API Connect | CWE-798 Hard Coded Credentials | n/a | Nov 7, 2026 |
| CVE-2026-17402 IBM API Connect | CRITICAL9.9 | IBM API Connect | CWE-78 OS Command Injection | n/a | Nov 7, 2026 |
| CVE-2026-17401 IBM API Connect | HIGH7.2 | IBM API Connect | CWE-121 Stack Buffer Overflow | n/a | Nov 7, 2026 |
| CVE-2026-17400 IBM API Connect | HIGH7.7 | IBM API Connect | CWE-89 SQL Injection | n/a | Nov 7, 2026 |
| CVE-2026-17399 IBM API Connect | CRITICAL9.9 | IBM API Connect | CWE-434 Unrestricted File Upload | n/a | Nov 7, 2026 |
| CVE-2026-17398 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-17397 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-17396 IBM API Connect | CRITICAL9.6 | IBM API Connect | CWE-89 SQL Injection | n/a | Nov 7, 2026 |
| CVE-2026-17394 IBM API Connect | CRITICAL9.6 | IBM API Connect | CWE-915 | n/a | Nov 7, 2026 |
| CVE-2026-17392 IBM API Connect | CRITICAL9.9 | IBM API Connect | CWE-90 | n/a | Nov 7, 2026 |
| CVE-2026-17388 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-639 Insecure Direct Object Reference | n/a | Nov 7, 2026 |
| CVE-2026-17387 IBM API Connect | HIGH7.7 | IBM API Connect | CWE-639 Insecure Direct Object Reference | n/a | Nov 7, 2026 |
| CVE-2026-17386 IBM API Connect | HIGH8.1 | IBM API Connect | CWE-338 | n/a | Nov 7, 2026 |
| CVE-2026-17385 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-17384 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-17383 IBM API Connect | HIGH7.7 | IBM API Connect | CWE-639 Insecure Direct Object Reference | n/a | Nov 7, 2026 |
| CVE-2026-17382 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-22 Path Traversal | n/a | Nov 7, 2026 |
| CVE-2026-17381 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-639 Insecure Direct Object Reference | n/a | Nov 7, 2026 |
| CVE-2026-17380 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-22 Path Traversal | n/a | Nov 7, 2026 |
| CVE-2026-17379 IBM API Connect | HIGH7.4 | IBM API Connect | CWE-347 | n/a | Nov 7, 2026 |
| CVE-2026-17378 IBM API Connect | HIGH7.7 | IBM API Connect | CWE-863 Incorrect Authorization | n/a | Nov 7, 2026 |
| CVE-2026-17376 IBM API Connect | HIGH7.7 | IBM API Connect | CWE-639 Insecure Direct Object Reference | n/a | Nov 7, 2026 |
| CVE-2026-17375 IBM API Connect | HIGH7.7 | IBM API Connect | CWE-639 Insecure Direct Object Reference | n/a | Nov 7, 2026 |
| CVE-2026-17374 IBM API Connect | HIGH7.7 | IBM API Connect | CWE-639 Insecure Direct Object Reference | n/a | Nov 7, 2026 |
| CVE-2026-17373 IBM API Connect | HIGH7.7 | IBM API Connect | CWE-863 Incorrect Authorization | n/a | Nov 7, 2026 |
| CVE-2026-17365 IBM API Connect | HIGH8.5 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-17363 IBM API Connect | HIGH7.7 | IBM API Connect | CWE-89 SQL Injection | n/a | Nov 7, 2026 |
| CVE-2026-17361 IBM API Connect | HIGH7.7 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-17360 IBM API Connect | CRITICAL9.8 | IBM API Connect | CWE-798 Hard Coded Credentials | n/a | Nov 7, 2026 |
| CVE-2026-17359 IBM API Connect | CRITICAL9.9 | IBM API Connect | CWE-94 Code Injection | n/a | Nov 7, 2026 |
| CVE-2026-17358 IBM API Connect | HIGH8.2 | IBM API Connect | CWE-287 Improper Authentication | n/a | Nov 7, 2026 |
| CVE-2026-17357 IBM API Connect | HIGH7.6 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-17356 IBM API Connect | HIGH8.7 | IBM API Connect | CWE-321 | n/a | Nov 7, 2026 |
| CVE-2026-17355 IBM API Connect | HIGH8.2 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
| CVE-2026-17354 IBM API Connect | CRITICAL9.9 | IBM API Connect | CWE-22 Path Traversal | n/a | Nov 7, 2026 |
| CVE-2026-17353 IBM API Connect | CRITICAL9.6 | IBM API Connect | CWE-918 Server Side Request Forgery | n/a | Nov 7, 2026 |
Page 1 of 7
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications