CVEs published May 4 to May 10, 2026
1,659 CVEs were published May 4 to May 10, 2026, 184 of them critical. CISA added 3 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,659
- Critical
- 184
- Added to CISA KEV
- 3
- Busiest day
- Wed, May 6 (481)
- Quietest day
- Sat, May 9 (68)
- May 4, 2026188 CVEs · 43 critical
- May 5, 2026191 CVEs · 28 critical
- May 6, 2026481 CVEs · 23 critical
- May 7, 2026203 CVEs · 26 critical
- May 8, 2026424 CVEs · 54 critical
- May 9, 202668 CVEs · 4 critical
- May 10, 2026104 CVEs · 6 critical
Added to CISA KEV 3
- CVE-2026-0300PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication PortalPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-6973An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with adminIvanti Endpoint Manager Mobile
- CVE-2026-42208LiteLLM: SQL injection in Proxy API key verificationBerriAI litellm · litellm