2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
14 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-59950 Lfprojects Mcp Python Sdk | HIGH7.6 | Lfprojects Mcp Python Sdk | CWE-346 | 0.2% | Jul 15, 2026 |
| CVE-2026-4035 Lfprojects Mlflow | HIGH7.7 | Lfprojects Mlflow | CWE-201 | 0.7% | Jun 3, 2026 |
| CVE-2026-4137 Lfprojects Mlflow | HIGH7.8 | Lfprojects Mlflow | CWE-378 | 0.2% | May 18, 2026 |
| CVE-2026-0545 Lfprojects Mlflow | CRITICAL9.8 | Lfprojects Mlflow | CWE-306 Missing Authentication | 4.4% | Apr 3, 2026 |
| CVE-2026-34742 Lfprojects Mcp Go Sdk | HIGH7.6 | Lfprojects Mcp Go Sdk | CWE-1188 | 0.7% | Apr 2, 2026 |
| CVE-2026-0596 Lfprojects Mlflow | HIGH7.8 | Lfprojects Mlflow | CWE-78 OS Command Injection | 1.3% | Mar 31, 2026 |
| CVE-2025-15379 Lfprojects Mlflow | CRITICAL10.0 | Lfprojects Mlflow | CWE-77 Command Injection | 2.4% | Mar 30, 2026 |
| CVE-2025-15036 Lfprojects Mlflow | CRITICAL10.0 | Lfprojects Mlflow | CWE-29 | 0.6% | Mar 30, 2026 |
| CVE-2025-15381 Lfprojects Mlflow | HIGH7.1 | Lfprojects Mlflow | CWE-200 Information Exposure | 0.3% | Mar 27, 2026 |
| CVE-2025-15031 Lfprojects Mlflow | CRITICAL9.1 | Lfprojects Mlflow | CWE-22 Path Traversal | 0.9% | Mar 18, 2026 |
| CVE-2025-14287 Lfprojects Mlflow | HIGH8.8 | Lfprojects Mlflow | CWE-94 Code Injection | 1.5% | Mar 16, 2026 |
| CVE-2026-27896 Lfprojects Mcp Go Sdk | HIGH7.0 | Lfprojects Mcp Go Sdk | CWE-178 | 0.5% | Feb 26, 2026 |
| CVE-2025-67733 Lfprojects Valkey | HIGH8.5 | Lfprojects Valkey | CWE-74 | 0.6% | Feb 23, 2026 |
| CVE-2026-0621 Lfprojects Mcp Typescript Sdk | HIGH8.7 | Lfprojects Mcp Typescript Sdk | CWE-1333 | 0.4% | Jan 5, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications