# Akamai CVEs

> Akamai: 17 CVEs mapped to its software or packages (0 in CISA KEV), newest first, with CVSS and EPSS, and 3 Akamai status incidents that name a CVE.

Canonical: https://rewindex.com/company/akamai/cves
Last updated: 2026-10-14T00:00:00Z

17 CVEs map to Akamai (0 in CISA KEV), newest first. Page 1. Query: `?sev=critical|high|medium|low&kev=yes|no&min_cvss=0..10&q=<text>&page=N`. Company profile: [Akamai](https://rewindex.com/company/akamai.md)
Scope: CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. A mapped CVE is not a statement that Akamai’s hosted service was exposed.
| Published (UTC) | CVE | Title | CVSS | KEV |
| --- | --- | --- | --- | --- |
| 2026-10-14 | [CVE-2026-50218](https://rewindex.com/cve/CVE-2026-50218.md) |  | 8.5 high |  |
| 2026-10-14 | [CVE-2026-50217](https://rewindex.com/cve/CVE-2026-50217.md) |  | 4.7 medium |  |
| 2026-10-14 | [CVE-2026-50216](https://rewindex.com/cve/CVE-2026-50216.md) |  | 5.3 medium |  |
| 2026-10-14 | [CVE-2026-50215](https://rewindex.com/cve/CVE-2026-50215.md) |  | 4.4 medium |  |
| 2026-10-14 | [CVE-2026-46449](https://rewindex.com/cve/CVE-2026-46449.md) |  | 6.7 medium |  |
| 2026-05-08 | [CVE-2026-34354](https://rewindex.com/cve/CVE-2026-34354.md) |  | 7.4 high |  |
| 2026-02-23 | [CVE-2026-26365](https://rewindex.com/cve/CVE-2026-26365.md) |  | 4.0 medium |  |
| 2025-12-04 | [CVE-2025-66373](https://rewindex.com/cve/CVE-2025-66373.md) |  | 4.8 medium |  |
| 2025-12-03 | [CVE-2025-53841](https://rewindex.com/cve/CVE-2025-53841.md) |  | 7.8 high |  |
| 2025-08-29 | [CVE-2025-54142](https://rewindex.com/cve/CVE-2025-54142.md) |  | 4.0 medium |  |
| 2025-08-07 | [CVE-2025-32094](https://rewindex.com/cve/CVE-2025-32094.md) |  | 4.0 medium |  |
| 2025-07-25 | [CVE-2025-54568](https://rewindex.com/cve/CVE-2025-54568.md) |  | 3.7 low |  |
| 2025-06-30 | [CVE-2025-52491](https://rewindex.com/cve/CVE-2025-52491.md) |  | 5.8 medium |  |
| 2025-06-30 | [CVE-2025-49493](https://rewindex.com/cve/CVE-2025-49493.md) |  | 5.8 medium |  |
| 2025-03-17 | [CVE-2025-30143](https://rewindex.com/cve/CVE-2025-30143.md) |  | 5.4 medium |  |
| 2025-01-29 | [CVE-2025-24527](https://rewindex.com/cve/CVE-2025-24527.md) |  | 8.0 high |  |
| 2024-11-04 | [CVE-2024-45164](https://rewindex.com/cve/CVE-2024-45164.md) |  | 4.3 medium |  |

## Akamai incidents that mention a CVE

Only explicit links: the incident text names the CVE id, or the notice says Akamai is not affected. A mention is not a statement of cause.

- 2026-10-23 [Customer Security Advisory: Node.js Brotli Remote Code Execution Vulnerabilities](https://rewindex.com/company/akamai/incidents/fy0lvwqxbdlr.md)
  - CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder (CVSS 9.2): names this CVE
- 2026-10-22 [Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities](https://rewindex.com/company/akamai/incidents/whj5crxg5ft5.md)
  - CVE-2026-15176 NGINX ngx_http_core_module vulnerability (CVSS 8.1): says not affected (“not vulnerable”)
  - CVE-2026-93479 NGINX map directive and regex matching vulnerability (CVSS 8.1): says not affected (“not vulnerable”)
  - CVE-2026-97205 NGINX ngx_http_core_module vulnerability (CVSS 8.1): says not affected (“not vulnerable”)
- 2026-10-21 [Customer Security Advisory: PHP Remote Code Execution Vulnerabilities](https://rewindex.com/company/akamai/incidents/3074yp9cpd8h.md)
  - CVE-2026-10961 (CVSS 8.3): names this CVE
  - CVE-2026-109618 RCE via OOM corruption (CVSS 9.8): names this CVE
  - CVE-2026-109619 RCE via stale global state (CVSS 8.1): names this CVE

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


## Charts

### Chart data: CVEs per week, last 52 weeks (Akamai)
Weeks start Monday, UTC. Bars: CVEs by published date (KEV date added if unpublished), by CVSS severity; kev_added: entries added to CISA KEV that week. Same filters as the list. The current week is partial.

| Week of (UTC) | Critical | High | Medium | Low | Not scored | Added to KEV |
| --- | --- | --- | --- | --- | --- | --- |
| 2025-11-03 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-11-10 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-11-17 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-11-24 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-12-01 | 0 | 1 | 1 | 0 | 0 | 0 |
| 2025-12-08 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-12-15 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-12-22 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025-12-29 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-01-05 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-01-12 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-01-19 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-01-26 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-02-02 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-02-09 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-02-16 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-02-23 | 0 | 0 | 1 | 0 | 0 | 0 |
| 2026-03-02 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-03-09 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-03-16 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-03-23 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-03-30 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-04-06 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-04-13 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-04-20 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-04-27 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-05-04 | 0 | 1 | 0 | 0 | 0 | 0 |
| 2026-05-11 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-05-18 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-05-25 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-06-01 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-06-08 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-06-15 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-06-22 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-06-29 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-07-06 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-07-13 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-07-20 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-07-27 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-08-03 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-08-10 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-08-17 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-08-24 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-08-31 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-07 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-14 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-21 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-09-28 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-10-05 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-10-12 | 0 | 1 | 4 | 0 | 0 | 0 |
| 2026-10-19 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2026-10-26 | 0 | 0 | 0 | 0 | 0 | 0 |

---
Canonical: https://rewindex.com/company/akamai/cves · Markdown: https://rewindex.com/company/akamai/cves.md · JSON: https://rewindex.com/api/v1/companies/akamai/cves · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:14:04.552Z
