2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
25 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-106509 Linuxfoundation Backstage Plugin-Techdocs-Node | HIGH7.7 | Linuxfoundation Backstage Plugin-Techdocs-Node | CWE-94 Code Injection | 0.4% | Oct 6, 2026 |
| CVE-2026-106505 Linuxfoundation Backstage Plugin-Techdocs-Node | HIGH7.7 | Linuxfoundation Backstage Plugin-Techdocs-Node | CWE-426 | 0.3% | Oct 6, 2026 |
| CVE-2026-53492 Linuxfoundation Containerd | HIGH8.4 | Linuxfoundation Containerd | CWE-20 Improper Input Validation | 0.4% | Jul 1, 2026 |
| CVE-2026-46680 Linuxfoundation Containerd | HIGH7.3 | Linuxfoundation Containerd | CWE-269 Improper Privilege Management | 0.2% | Jul 1, 2026 |
| CVE-2026-53488 Linuxfoundation Containerd | CRITICAL9.4 | Linuxfoundation Containerd | CWE-20 Improper Input Validation | 0.2% | Jul 1, 2026 |
| CVE-2026-44477 Linuxfoundation Cloudnativepg | CRITICAL9.4 | Linuxfoundation Cloudnativepg | CWE-250 | 0.5% | May 28, 2026 |
| CVE-2026-40938 Linuxfoundation Tekton Pipelines | HIGH7.5 | Linuxfoundation Tekton Pipelines | CWE-88 | 0.9% | Apr 21, 2026 |
| CVE-2026-34045 Linuxfoundation Podman Desktop | HIGH8.2 | Linuxfoundation Podman Desktop | CWE-209 | 0.7% | Apr 7, 2026 |
| CVE-2026-35167 Linuxfoundation Kedro | HIGH7.1 | Linuxfoundation Kedro | CWE-22 Path Traversal | 0.4% | Apr 6, 2026 |
| CVE-2026-34992 Linuxfoundation Antrea | HIGH7.1 | Linuxfoundation Antrea | CWE-311 | 0.2% | Apr 6, 2026 |
| CVE-2026-27489 Linuxfoundation Onnx | HIGH8.7 | Linuxfoundation Onnx | CWE-23 | 0.6% | Apr 1, 2026 |
| CVE-2026-33701 Linuxfoundation Opentelemetry Instrumentation For Java | CRITICAL9.3 | Linuxfoundation Opentelemetry Instrumentation For Java | CWE-502 Deserialization of Untrusted Data | 1.1% | Mar 27, 2026 |
| CVE-2026-26008 Linuxfoundation Everest | HIGH7.5 | Linuxfoundation Everest | CWE-125 Out of Bounds Read | 0.5% | Mar 26, 2026 |
| CVE-2026-23995 Linuxfoundation Everest | HIGH8.4 | Linuxfoundation Everest | CWE-121 Stack Buffer Overflow | 0.2% | Mar 26, 2026 |
| CVE-2026-22593 Linuxfoundation Everest | HIGH8.4 | Linuxfoundation Everest | CWE-193 | 0.1% | Mar 26, 2026 |
| CVE-2026-33216 Linuxfoundation Nats-Server | HIGH8.6 | Linuxfoundation Nats-Server | CWE-256 | 0.6% | Mar 25, 2026 |
| CVE-2026-33211 Linuxfoundation Tekton Pipelines | CRITICAL9.6 | Linuxfoundation Tekton Pipelines | CWE-22 Path Traversal | 0.7% | Mar 24, 2026 |
| CVE-2026-28500 Linuxfoundation Onnx | HIGH8.6 | Linuxfoundation Onnx | CWE-345 | 0.3% | Mar 18, 2026 |
| CVE-2026-29186 Linuxfoundation Backstage Plugin-Techdocs-Node | HIGH7.7 | Linuxfoundation Backstage Plugin-Techdocs-Node | CWE-74 | 0.9% | Mar 7, 2026 |
| CVE-2026-27969 Linuxfoundation Vitess | CRITICAL9.3 | Linuxfoundation Vitess | CWE-22 Path Traversal | 0.6% | Feb 26, 2026 |
| CVE-2026-27965 Linuxfoundation Vitess | HIGH8.4 | Linuxfoundation Vitess | CWE-78 OS Command Injection | 0.7% | Feb 26, 2026 |
| CVE-2026-25804 Linuxfoundation Antrea | HIGH8.0 | Linuxfoundation Antrea | CWE-287 Improper Authentication | 0.7% | Feb 6, 2026 |
| CVE-2026-25153 Linuxfoundation Backstage | HIGH7.7 | Linuxfoundation Backstage | CWE-94 Code Injection | 0.6% | Jan 30, 2026 |
| CVE-2026-24835 Linuxfoundation Podman Desktop | HIGH8.8 | Linuxfoundation Podman Desktop | CWE-285 Improper Authorization | 0.3% | Jan 28, 2026 |
| CVE-2026-24124 Linuxfoundation Dragonfly | HIGH8.9 | Linuxfoundation Dragonfly | CWE-306 Missing Authentication | 0.8% | Jan 22, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications