2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
7 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-42100 Sparxsystems Pro Cloud Server | HIGH7.1 | Sparxsystems Pro Cloud Server | CWE-228 | 0.6% | May 19, 2026 |
| CVE-2026-42099 Sparxsystems Pro Cloud Server | HIGH7.7 | Sparxsystems Pro Cloud Server | CWE-362 Race Condition | 0.7% | May 19, 2026 |
| CVE-2026-42097 Sparxsystems Pro Cloud Server | CRITICAL9.3 | Sparxsystems Pro Cloud Server | CWE-639 Insecure Direct Object Reference | 0.9% | May 19, 2026 |
| CVE-2026-42096 Sparxsystems Pro Cloud Server | HIGH8.7 | Sparxsystems Pro Cloud Server | CWE-863 Incorrect Authorization | 0.6% | May 19, 2026 |
| CVE-2025-15625 Sparxsystems Pro Cloud Server | CRITICAL9.5 | Sparxsystems Pro Cloud Server | CWE-89 SQL Injection | 0.4% | Apr 17, 2026 |
| CVE-2025-15624 Sparxsystems Pro Cloud Server | CRITICAL9.3 | Sparxsystems Pro Cloud Server | CWE-256 | 0.4% | Apr 17, 2026 |
| CVE-2025-15623 Sparxsystems Pro Cloud Server | CRITICAL9.3 | Sparxsystems Pro Cloud Server | CWE-359 | 0.3% | Apr 17, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications