2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
17 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-0288 Paloaltonetworks Pan-Os | HIGH7.2 | Paloaltonetworks Pan-Os | CWE-787 Out of Bounds Write | 0.8% | Jul 8, 2026 |
| CVE-2026-45169 Paloaltonetworks Idira Privileged Access Manager Vault | HIGH8.7 | Paloaltonetworks Idira Privileged Access Manager Vault | CWE-400 Uncontrolled Resource Consumption | 0.6% | Jun 12, 2026 |
| CVE-2026-45170 Paloaltonetworks Idira Privilege Cloud Connector | HIGH7.5 | Paloaltonetworks Idira Privilege Cloud Connector | CWE-295 | 0.2% | Jun 12, 2026 |
| CVE-2026-45174 Paloaltonetworks Idira Endpoint Privilege Manager | HIGH8.5 | Paloaltonetworks Idira Endpoint Privilege Manager | CWE-404 | 0.2% | Jun 11, 2026 |
| CVE-2026-45172 Paloaltonetworks Idira Privileged Session Manager For Ssh | HIGH8.7 | Paloaltonetworks Idira Privileged Session Manager For Ssh | CWE-78 OS Command Injection | 0.8% | Jun 11, 2026 |
| CVE-2026-45171 Paloaltonetworks Idira Privileged Session Manager | HIGH8.7 | Paloaltonetworks Idira Privileged Session Manager | CWE-22 Path Traversal | 0.7% | Jun 11, 2026 |
| CVE-2026-45175 Paloaltonetworks Idira Endpoint Privilege Manager | HIGH8.5 | Paloaltonetworks Idira Endpoint Privilege Manager | CWE-295 | 0.2% | Jun 11, 2026 |
| CVE-2026-45178 Paloaltonetworks Idira Secrets Manager | HIGH8.4 | Paloaltonetworks Idira Secrets Manager | CWE-284 Improper Access Control | 0.5% | Jun 11, 2026 |
| CVE-2026-45177 Paloaltonetworks Idira Secrets Manager Edge | CRITICAL9.1 | Paloaltonetworks Idira Secrets Manager Edge | CWE-284 Improper Access Control | 0.7% | Jun 11, 2026 |
| CVE-2026-45176 Paloaltonetworks Idira Endpoint Privilege Manager | HIGH8.9 | Paloaltonetworks Idira Endpoint Privilege Manager | CWE-269 Improper Privilege Management | 0.2% | Jun 11, 2026 |
| CVE-2026-0274 Paloaltonetworks Cortex Xsiam Commvaultsecurityiq Marketplace | HIGH8.1 | Paloaltonetworks Cortex Xsiam Commvaultsecurityiq Marketplace | CWE-1390 | 0.3% | Jun 10, 2026 |
| CVE-2026-0236 Paloaltonetworks Prisma Browser | HIGH7.3 | Paloaltonetworks Prisma Browser | CWE-94 Code Injection | 0.2% | May 13, 2026 |
| CVE-2026-0265 Paloaltonetworks Pan-Os | HIGH7.2 | Paloaltonetworks Pan-Os | CWE-347 | 1.1% | May 13, 2026 |
| CVE-2026-0264 Paloaltonetworks Pan-Os | HIGH7.2 | Paloaltonetworks Pan-Os | CWE-122 Heap Buffer Overflow | 0.5% | May 13, 2026 |
| CVE-2026-0263 Paloaltonetworks Pan-Os | HIGH7.2 | Paloaltonetworks Pan-Os | CWE-787 Out of Bounds Write | 0.4% | May 13, 2026 |
| CVE-2026-0237 Paloaltonetworks Prisma Browser | HIGH7.3 | Paloaltonetworks Prisma Browser | CWE-424 | 0.1% | May 13, 2026 |
| CVE-2026-0234 Paloaltonetworks Cortex Xsiam | HIGH7.2 | Paloaltonetworks Cortex Xsiam | CWE-347 | 0.2% | Apr 13, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications