Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,106All CVEsplus 19,119 rejected
- 490Last 24 hours2,831 in the last 7 days
- 16,886Last 30 days1,550 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 16 | 23 | 18 | 5 | 0 | 62 | 77 |
| 2025 | 4 | 3 | 6 | 2 | 0 | 15 | 15 |
| Title | ||
|---|---|---|
| CVE-2026-63244 | Authentication Bypass VulnerabilityWizLearn Technologies Pte. Ltd. · Learning Management System | Critical9.8 |
| CVE-2026-63243 | Firmware verification vulnerabilityCreative Labs · Creative Sound Blaster Katana V2, V2X, SE | Medium4.3 |
| CVE-2026-55981 | Firmware verification vulnerabilityCreative Labs · Creative Sound Blaster Katana V2, V2X, SE | Critical9.6 |
| CVE-2026-43858 | A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43857 | A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43856 | A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code…Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43855 | A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.Advantech · ADAM-3600 | High7.5 |
| CVE-2026-43854 | A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.Advantech · ADAM-3600 | Medium6.3 |
| CVE-2026-43853 | A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.Advantech · ADAM-3600 | High8.2 |
| CVE-2026-43852 | A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.Advantech · ADAM-3600 | High8.2 |
| CVE-2026-43851 | A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.Advantech · ADAM-3600 | High8.2 |
| CVE-2026-43850 | A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43849 | A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43848 | A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43847 | A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the…Advantech · ADAM-3600 | High8.2 |
| CVE-2026-43846 | A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43845 | A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.Advantech · ADAM-3600 | Critical9.2 |
| CVE-2026-43844 | A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.Advantech · ADAM-3600 | Critical9.3 |
| CVE-2026-43843 | An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43842 | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm…Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43841 | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm…Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43840 | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected…Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43839 | A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.Advantech · ADAM-3600 | High8.7 |
| CVE-2026-43838 | A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.Advantech · ADAM-3600 | Critical9.2 |
| CVE-2026-43837 | A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.Advantech · ADAM-3600 | High7.5 |
| CVE-2026-43836 | A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.Advantech · ADAM-3600 | Critical9.3 |
| CVE-2026-43835 | A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising…Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43834 | A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.Advantech · ADAM-3600 | High7.5 |
| CVE-2026-89191 | Stored Cross-Site Scripting in SQLView KRISSQLView · SQLView KRIS | Medium6.8 |
| CVE-2026-78237 | Insufficient input validation in Admin By Request (ABR)Admin By Request (ABR) · Admin By Request (ABR) | High7.8 |
| CVE-2026-78236 | Insecure PIN derivation mechanism in Admin By Request (ABR)Admin By Request (ABR) · Admin By Request (ABR) | High8.8 |
| CVE-2026-55980 | Denial-of-service vulnerability in CatchPulseSecureAge · CatchPulse | Medium5.5 |
| CVE-2026-55979 | Improper access control check in CatchPulse's named pipe communication interfaceSecureAge · CatchPulse | Medium5.2 |
| CVE-2026-55978 | Improper access control vulnerability in CatchPulseSecureAge · CatchPulse | High8.4 |
| CVE-2026-43833 | A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.Advantech · ADAM-3600 | High7.5 |
| CVE-2026-43832 | A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the…Advantech · ADAM-3600 | Critical9.2 |
| CVE-2026-43831 | A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.Advantech · ADAM-3600 | Critical9.2 |
| CVE-2026-43830 | A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43829 | A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the…Advantech · ADAM-3600 | Critical9.2 |
| CVE-2026-63242 | Business logic vulnerabilityThree Learning · Koollab LMS | Medium4.3 |
| CVE-2026-63241 | Insecure direct object reference vulnerabilityThree Learning · Koollab LMS | Low3.1 |
| CVE-2026-63240 | Information disclosure vulnerabilityThree Learning · Koollab LMS | Medium4.3 |
| CVE-2026-63239 | Hard-coded AWS IAM credentials vulnerabilityThree Learning · Koollab LMS | Medium5.4 |
| CVE-2026-63238 | Authentication bypass vulnerabilityThree Learning · Koollab LMS | Medium6.5 |
| CVE-2026-63237 | TOTP two-factor authentication bypass vulnerabilityThree Learning · Koollab LMS | Medium4.8 |
| CVE-2026-63236 | Improper access control vulnerabilityThree Learning · Koollab LMS | Low3.7 |
| CVE-2026-63235 | Improper access control vulnerabilityThree Learning · Koollab LMS | Low3.7 |
| CVE-2026-63234 | SQL injection and unsafe deserialisation vulnerabilityThree Learning · Koollab LMS | Critical9.9 |
| CVE-2026-63233 | SQL injection and unsafe deserialisation vulnerabilityThree Learning · Koollab LMS | Critical9.9 |
| CVE-2026-63232 | SQL injection and unsafe deserialisation vulnerabilityThree Learning · Koollab LMS | Critical9.9 |