2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
7 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-4611 Totolink X6000r Firmware | HIGH8.6 | Totolink X6000r Firmware | CWE-77 Command Injection | 5.3% | Mar 23, 2026 |
| CVE-2025-67445 Totolink X5000r Firmware | HIGH7.5 | Totolink X5000r Firmware | CWE-400 Uncontrolled Resource Consumption | 0.3% | Feb 24, 2026 |
| CVE-2025-70328 Totolink X6000r Firmware | HIGH8.8 | Totolink X6000r Firmware | CWE-78 OS Command Injection | 1.9% | Feb 23, 2026 |
| CVE-2025-70327 Totolink X5000r Firmware | CRITICAL9.8 | Totolink X5000r Firmware | CWE-88 | 0.7% | Feb 23, 2026 |
| CVE-2026-26736 Totolink A3002ru Firmware | HIGH8.8 | Totolink A3002ru Firmware | CWE-787 Out of Bounds Write | 1.3% | Feb 17, 2026 |
| CVE-2026-26732 Totolink A3002ru Firmware | HIGH8.8 | Totolink A3002ru Firmware | CWE-787 Out of Bounds Write | 1.0% | Feb 17, 2026 |
| CVE-2026-26731 Totolink A3002ru Firmware | HIGH8.8 | Totolink A3002ru Firmware | CWE-787 Out of Bounds Write | 1.3% | Feb 17, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications