2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
11 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-105868 Payloadcms Payload | HIGH8.6 | Payloadcms Payload | CWE-434 Unrestricted File Upload | 0.3% | Oct 6, 2026 |
| CVE-2026-105863 Payloadcms Payload | CRITICAL9.2 | Payloadcms Payload | CWE-290 | 0.4% | Oct 6, 2026 |
| CVE-2026-105861 Payloadcms Payload | HIGH7.2 | Payloadcms Payload | CWE-200 Information Exposure | 0.2% | Oct 6, 2026 |
| CVE-2026-105860 Payloadcms Payload | HIGH7.1 | Payloadcms Payload | CWE-862 Missing Authorization | 0.2% | Oct 6, 2026 |
| CVE-2026-105856 Payloadcms Payload | HIGH8.6 | Payloadcms Payload | CWE-89 SQL Injection | 0.3% | Oct 6, 2026 |
| CVE-2026-105855 Payloadcms Payload | HIGH7.6 | Payloadcms Payload | CWE-284 Improper Access Control | 0.3% | Oct 6, 2026 |
| CVE-2026-105854 Payloadcms Payload | HIGH8.7 | Payloadcms Payload | CWE-400 Uncontrolled Resource Consumption | 0.3% | Oct 6, 2026 |
| CVE-2026-105851 Payloadcms Payload | CRITICAL9.3 | Payloadcms Payload | CWE-284 Improper Access Control | 0.3% | Oct 6, 2026 |
| CVE-2026-105850 Payloadcms Payload | HIGH8.8 | Payloadcms Payload | CWE-837 | 0.3% | Oct 6, 2026 |
| CVE-2026-105849 Payloadcms Payload | HIGH7.7 | Payloadcms Payload | CWE-201 | 0.3% | Oct 6, 2026 |
| CVE-2026-34747 Payloadcms Payload | HIGH8.5 | Payloadcms Payload | CWE-89 SQL Injection | 0.4% | Apr 1, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications