CVEs published May 25 to May 31, 2026
2,069 CVEs were published May 25 to May 31, 2026, 190 of them critical. CISA added 5 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 2,069
- Critical
- 190
- Added to CISA KEV
- 5
- Busiest day
- Wed, May 27 (714)
- Quietest day
- Sat, May 30 (51)
- May 25, 2026187 CVEs · 19 critical
- May 26, 2026275 CVEs · 23 critical
- May 27, 2026714 CVEs · 46 critical
- May 28, 2026543 CVEs · 57 critical
- May 29, 2026248 CVEs · 43 critical
- May 30, 202651 CVEs · 1 critical
- May 31, 202651 CVEs · 1 critical
Added to CISA KEV 5
- CVE-2026-48172LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026.LiteSpeed Technologies cPanel Plugin · LiteSpeed Technologi…
- CVE-2026-45321Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys@tanstack arktype-adapter · @tanstack eslint-plugin-rou… +82
- CVE-2026-48027Compromised Nx Console version 18.95.0nrwl nx-console
- CVE-2026-8398A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434)AVB Disc Soft DAEMON Tools Lite
- CVE-2026-0257PAN-OS: GlobalProtect Authentication Bypass VulnerabilitiesPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1