2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
3 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-28798 Zimaspace Zimaos | CRITICAL9.0 | Zimaspace Zimaos | CWE-918 Server Side Request Forgery | 0.5% | Apr 3, 2026 |
| CVE-2026-28286 Zimaspace Zimaos | HIGH8.5 | Zimaspace Zimaos | CWE-73 | 0.6% | Mar 2, 2026 |
| CVE-2026-21891 Zimaspace Zimaos | CRITICAL9.4 | Zimaspace Zimaos | CWE-287 Improper Authentication | 2.3% | Jan 8, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications