CVE-2026 records published in May 2026

This page lists the 6,293 CVE-2026 records published in May 2026, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 22 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2026 list filters these records by severity or signal.

Critical

66110.5% of these records

Listed in CISA KEV

220.3% of these records

Reported exploited

140.2% of these records

Detection signal

1021.6% of these records

Exploit code

2103.3% of these records

Actionable vendor fix

5,09581.0% of these records

Figures as of 2026-10-24 13:48 UTC. Records published in May 2026 have had from about five months to about six months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.