CVEs published in May 2026
655 tracked CVEs from 23 vendors had their first vendor advisory published in May 2026: 169 critical, 357 high, 8 in CISA KEV. Newest first.
351 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-40414High
Windows TCP/IP Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40410High
Windows SMB Client Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40408High
Windows WAN ARP Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40407High
Windows Common Log File System Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40406High
Windows TCP/IP Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40405High
Windows TCP/IP Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40399High
Windows TCP/IP Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40380Medium
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40377High
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-40368High
Microsoft SharePoint Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35439High
Microsoft SharePoint Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35424High
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35423Medium
Windows 11 Telnet Client Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35422Medium
Windows TCP/IP Driver Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35421High
Windows GDI Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35420High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35419Medium
Windows DWM Core Library Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35418High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35417High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35416High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-35415High
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34351High
Windows TCP/IP Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34350Medium
Windows Storport Miniport Driver Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34347High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34345High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34344High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34343High
Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34342High
Windows Print Spooler Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34333High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34331High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34330High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-34329High
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33841High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33840High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33839High
Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-33834High
Windows Event Logging Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21530Medium
Windows Rich Text Edit Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-43515High
Improper Authorization allows security bypass
NetApp, Red Hat · 2 advisories - Added
CVE-2026-43514High
Information disclosure via AJP secret timing discrepancy
NetApp, Red Hat · 2 advisories - Added
CVE-2026-43512High
Authentication bypass via digest authentication
NetApp, Red Hat · 2 advisories - Added
CVE-2026-41293Critical
Apache Tomcat: HTTP/2 request headers not validated
Apache, NetApp · 3 advisories - Added
CVE-2026-8111High
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6
Ivanti · 1 advisory - Added
CVE-2026-8110High
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6
Ivanti · 1 advisory - Added
CVE-2026-8109Medium
exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6
Ivanti · 1 advisory - Added
CVE-2026-7432High
race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM
Ivanti · 1 advisory - Added
CVE-2026-7431Medium
incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6
Ivanti · 1 advisory - Added
CVE-2026-41713High
malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way
VMware · 1 advisory - Added
CVE-2026-41712High
Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could
VMware · 1 advisory - Added
CVE-2026-44279Medium
OTP Disclosure via Exported TokenContentProvider
Fortinet · 1 advisory - Added
Hardcoded Encryption Key Used for VPN Saved Passwords
Fortinet · 1 advisory - Added
CVE-2026-44277Critical
Improper access control on API endpoints
Fortinet · 1 advisory - Added
CVE-2026-26083Critical
Incorrect global authorization
Fortinet · 1 advisory - Added
CVE-2026-25690Medium
Arbitrary log file read in administrative interface
Fortinet · 1 advisory - Added
CVE-2026-25088Medium
User controlled SQL commands
Fortinet · 1 advisory - Added
CVE-2025-67604Medium
DoS due to unsafe function in signal handler
Fortinet · 1 advisory - Added
CVE-2025-53870Medium
OS command injection in CLI
Fortinet · 1 advisory - Added
CVE-2025-53844High
Out-of-bounds access in CAPWAP daemon
Fortinet · 1 advisory - Added
CVE-2025-53681Medium
SQL command injection in administrative portal
Fortinet · 1 advisory - Added
CVE-2025-53680Medium
Command injection in CLI
Fortinet · 1 advisory - Added
CVE-2026-7287High
** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep, formWlAc, formPasswordSetup, formUpgradeCert, and formDelcert functions of the “webs” binary in Zyxel NWA1100-N customized firmware version 1.00(AACE.1)C0 could allow an attacker to trigger a denial-of-service (DoS) condition by sending a crafted HTTP request to a vulnerable device
Zyxel · 1 advisory - Added
CVE-2026-7257Medium
** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file
Zyxel · 1 advisory - Added
CVE-2026-7256High
** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operating system (OS) commands on a vulnerable device by sending a crafted HTTP request
Zyxel · 1 advisory - Added
CVE-2026-7255Medium
** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to brute-force the password and bypass authentication
Zyxel · 1 advisory - Added
CVE-2026-43896Medium
stack overflow in recursive object merge
NetApp, Red Hat · 2 advisories - Added
CVE-2026-43895Medium
embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts
NetApp, Red Hat · 2 advisories - Added
CVE-2026-43894Medium
jq Vulnerability in NetApp Products
NetApp, Red Hat · 2 advisories - Added
CVE-2026-41256Medium
embedded NUL truncates top-level jq programs loaded with -f
NetApp, Red Hat · 2 advisories - Added
CVE-2026-41257High
signed-int overflow in stack_reallocate
NetApp, Red Hat · 2 advisories - Added
CVE-2026-43500High
Linux Kernel Vulnerability in NetApp Products
Fortinet, NetApp, Red Hat · 3 advisories - Added
CVE-2026-45186Critical
denial of service via crafted XML input
Red Hat, Veeam · 2 advisories - Added
CVE-2026-42310High
Denial of Service via malicious PDF processing
Red Hat, Splunk · 2 advisories - Added
CVE-2026-42309High
Denial of Service via specially crafted coordinate input
Red Hat, Splunk · 2 advisories - Added
CVE-2026-41705High
Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection
VMware · 1 advisory - Added
CVE-2026-25199Critical
Instances deployed via the Proxmox extension allow unauthorized access to instances belonging to other tenants
Proxmox · 1 advisory - Added
CVE-2025-69691Critical
Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php
pfSense · 1 advisory - Added
CVE-2025-69690Critical
Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property
pfSense · 1 advisory - Added
CVE-2024-27686High
Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted packet data to the SMB service on TCP port 445
MikroTik · 1 advisory - Added
CVE-2026-42264Critical
Prototype pollution allows information disclosure and request manipulation
NetApp, Red Hat · 2 advisories - Added
CVE-2026-23003High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-22997High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-22992High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-22991High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-39826Critical
Cross-site scripting due to incorrect script tag escaping
Red Hat, Splunk · 3 advisories - Added
CVE-2026-39823Critical
Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content
Red Hat, Splunk · 3 advisories - Added
CVE-2026-39820Critical
Go net/mail: Denial of Service via crafted email inputs
NetApp, Red Hat, Splunk · 4 advisories - Added
CVE-2026-33811Critical
Go net package: Denial of Service via long CNAME response in LookupCNAME
NetApp, Red Hat, Splunk · 4 advisories - Added
CVE-2026-42499Critical
Denial of Service via pathological email address parsing
NetApp, Red Hat, Splunk · 4 advisories - Added
CVE-2026-39825Critical
ReverseProxy forwards hidden query parameters, potentially bypassing security controls
Red Hat, Splunk · 3 advisories - Added
CVE-2026-33814Critical
Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
NetApp, Red Hat, Splunk · 3 advisories - Added
CVE-2026-7821High
Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1
Ivanti · 1 advisory - Added
CVE-2026-5788High
Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1
Ivanti · 1 advisory - Added
CVE-2026-5787High
Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1
Ivanti · 1 advisory - Added
CVE-2026-5786High
Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1
Ivanti · 1 advisory - Added
CVE-2026-6973HighCISA KEV
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
Ivanti · 1 advisory - Added
CVE-2026-41004Medium
Spring Cloud: When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.
VMware · 1 advisory - Added
CVE-2026-41002High
The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories…
VMware · 1 advisory - Added
CVE-2026-40981High
When using Google Secrets Manager as a backend for the Spring Cloud Config server a client
Red Hat, VMware · 2 advisories - Added
CVE-2026-40982Critical
Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module
Red Hat, VMware · 2 advisories - Added
CVE-2026-43284High
Linux Kernel Vulnerability in NetApp Products
Fortinet, NetApp, Red Hat · 3 advisories - Added
CVE-2026-6788High
Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files
WatchGuard · 1 advisory