CVEs from 2026

13,362 normalized CVEs published or assigned in this year.

Total

13,362

critical

critical 1,116

high

high 3,953

medium

medium 4,013

low

low 420

% Critical

8.4%

% with KEV

0.4%

% with exploit

0.4%

Top vendors

cisco 657
google 520
adobe 332
microsoft 303
openclaw 167
apache 132
mozilla 108
tanstack 84

Top products

chrome 299
firepower_threat_defense 298
firepower_threat_defense_software 295
gcp 221
openclaw 166
commerce 104
commerce_b2b 89
magento 74

Top packages

npm/openclaw 407
npm/parse-server 141
Packagist/wwbn/avideo 129
NPM/openclaw 129
npm/n8n 120
Packagist/symfony/symfony 104
Go/github.com/mattermost/mattermost-server 103
NuGet/Magick.NET-Q16-HDRI-AnyCPU 86

critical high medium low unknown

0

KEV Has exploit

CVE	Severity	CVSS	Risk	Published	Description	Impact
CVE-2026-42607	critical	9.1	10.0	23d ago	Grav Vulnerable to Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature