CVE-2026 records published in February 2026

This page lists the 3,068 CVE-2026 records published in February 2026, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 18 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2026 list filters these records by severity or signal.

Critical

41113.4% of these records

Listed in CISA KEV

180.6% of these records

Reported exploited

70.2% of these records

Detection signal

752.4% of these records

Exploit code

1294.2% of these records

Actionable vendor fix

2,26974.0% of these records

Figures as of 2026-10-24 13:48 UTC. Records published in February 2026 have had from about eight months to about nine months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.