2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
17 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-59289 Vmware Spring For Graphql | HIGH7.5 | Vmware Spring For Graphql | CWE-770 Allocation Without Limits | 0.5% | Aug 27, 2026 |
| CVE-2026-59288 Vmware Spring For Graphql | HIGH7.4 | Vmware Spring For Graphql | CWE-200 Information Exposure | 0.4% | Aug 27, 2026 |
| CVE-2026-59286 Vmware Spring For Graphql | HIGH8.1 | Vmware Spring For Graphql | CWE-494 | 0.3% | Aug 27, 2026 |
| CVE-2026-59285 Vmware Spring For Graphql | HIGH8.1 | Vmware Spring For Graphql | CWE-502 Deserialization of Untrusted Data | 0.4% | Aug 27, 2026 |
| CVE-2026-59354 Vmware Spring Security | CRITICAL9.6 | Vmware Spring Security | CWE-20 Improper Input Validation | 0.5% | Aug 27, 2026 |
| CVE-2026-59270 Vmware Spring Security | CRITICAL9.4 | Vmware Spring Security | CWE-863 Incorrect Authorization | 0.4% | Aug 27, 2026 |
| CVE-2026-47879 Vmware Spring Cloud Gateway | HIGH7.7 | Vmware Spring Cloud Gateway | CWE-918 Server Side Request Forgery | 0.3% | Aug 27, 2026 |
| CVE-2026-47836 Vmware Spring Cloud Config | HIGH7.2 | Vmware Spring Cloud Config | CWE-367 | 0.2% | Aug 26, 2026 |
| CVE-2026-47835 Vmware Spring Ai | HIGH8.6 | Vmware Spring Ai | CWE-943 | 0.4% | Jun 15, 2026 |
| CVE-2026-41699 Vmware Spring For Graphql | HIGH8.1 | Vmware Spring For Graphql | CWE-502 Deserialization of Untrusted Data | 0.7% | Jun 11, 2026 |
| CVE-2026-40993 Vmware Spring Security | HIGH7.3 | Vmware Spring Security | CWE-502 Deserialization of Untrusted Data | 0.3% | Jun 10, 2026 |
| CVE-2026-41855 Vmware Spring Framework | HIGH8.1 | Vmware Spring Framework | CWE-502 Deserialization of Untrusted Data | 0.5% | Jun 9, 2026 |
| CVE-2026-41702 Vmware Fusion | HIGH7.8 | Vmware Fusion | CWE-367 | 0.1% | May 15, 2026 |
| CVE-2026-41002 Vmware Spring Cloud Config | HIGH7.2 | Vmware Spring Cloud Config | CWE-367 | 0.2% | May 7, 2026 |
| CVE-2026-22733 Vmware Spring Boot | HIGH8.2 | Vmware Spring Boot | CWE-288 Authentication Bypass via Alternate Path | 0.4% | Mar 20, 2026 |
| CVE-2026-22731 Vmware Spring Boot | HIGH8.2 | Vmware Spring Boot | CWE-288 Authentication Bypass via Alternate Path | 0.3% | Mar 19, 2026 |
| CVE-2026-22720 Vmware Aria Operations | HIGH8.0 | Vmware Aria Operations | CWE-79 Cross Site Scripting | 0.4% | Feb 25, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications