Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 451Last 24 hours2,719 in the last 7 days
- 16,910Last 30 days1,556 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 16 | 26 | 19 | 2 | 0 | 63 | 91 |
| 2025 | 4 | 14 | 8 | 0 | 0 | 26 | 28 |
| 2024 | 2 | 0 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-59105 | Universal sysadmin credential vulnerability in JumisJumis Pro SIA · Jumis | Critical9.3 |
| CVE-2026-70382 | Stored Cross-Site Scripting in Web InterfaceWolfVision · Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro | Medium5.1 |
| CVE-2026-70381 | Unauthorized Access to Internal Web ResourcesWolfVision · Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro | Medium6.9 |
| CVE-2026-70380 | Resource Exhaustion in MICE ServiceWolfVision · Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro | Medium6.9 |
| CVE-2026-70379 | Unauthorized Access to vSolution Matrix RTSPWolfVision · Cynap Pro, Cynap Core Pro | High7.1 |
| CVE-2026-59107 | Shared SSH Authentication Key in vSolution Matrix File SharingWolfVision · Cynap Pro, Cynap Core Pro | Critical9.2 |
| CVE-2026-59106 | Unauthenticated RCE Vulnerability in WolfProt interface implementationWolfVision · Cynap Pure (Next Gen), Cynap Bridge | Critical9.3 |
| CVE-2026-82947 | Multiple Out-of-Bounds Reads in Frame ProcessingRT-Labs AB · SOEM | High7.1 |
| CVE-2026-82946 | Null Pointer Dereference in Mailbox Error HandlingRT-Labs AB · SOEM | Medium6.5 |
| CVE-2026-82945 | Memory Corruption via FMMU Configuration Table OverflowRT-Labs AB · SOEM | Medium6.5 |
| CVE-2026-82944 | Buffer Overflow in CoE SDO Upload Multi-Segment Data TransfersRT-Labs AB · SOEM | High8.8 |
| CVE-2026-82943 | Out-of-Bounds Read via Unchecked Length ValuesRT-Labs AB · SOEM | Medium6.5 |
| CVE-2026-70388 | Memory Corruption via Integer Underflow in Message Length ValidationRT-Labs AB · SOEM | High8.3 |
| CVE-2026-70387 | OnePlus OxygenOS exposed dangerous method vulnerabilityOnePlus · OxygenOS | High8.4 |
| CVE-2026-70386 | OnePlus OxygenOS improper neutralization of special elements vulnerabilityOnePlus · OxygenOS | High8.5 |
| CVE-2026-103905 | Unauthenticated Plugin Safe Mode Toggle Vulnerability in JTL-ShopJTL-Software GmbH · JTL-Shop | High8.7 |
| CVE-2026-103904 | Stored XSS Vulnerability in JTL-ShopJTL-Software GmbH · JTL-Shop | High8.6 |
| CVE-2026-89310 | SQL Command Injection Vulnerability in JTL-WMSJTL SW GmbH · JTL-WMS | Critical9.4 |
| CVE-2026-89309 | Missing Authentication Vulnerability in JTL-WMSJTL SW GmbH · JTL-WMS | Critical10.0 |
| CVE-2026-103903 | MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalationMikroTik · RouterOS | High8.7 |
| CVE-2026-103902 | DigiDoc improper signature verificationDigiDoc · libdigidocpp | High7.5 |
| CVE-2026-33586 | Authenticated SMTP Sender Address ForgeryOVHcloud · OVHcloud | Medium6.3 |
| CVE-2026-28199 | Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS ShellCohesity · NetBackup Flex OS | Medium4.8 |
| CVE-2026-28198 | Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS ShellCohesity · NetBackup Flex OS | Critical9.4 |
| CVE-2026-28197 | Privilege Escalation via Argument Injection in NetBackup Flex OS ShellCohesity · NetBackup Flex OS | Critical9.4 |
| CVE-2026-89307 | HTML injection allows open redirection in WordPress theme design-scuole-wordpress-themeDevelopers Italia · design-scuole-wordpress-theme | Medium5.1 |
| CVE-2026-87793 | Reflected XSS in WordPress theme design-scuole-wordpress-themeDevelopers Italia · design-scuole-wordpress-theme | Medium5.1 |
| CVE-2026-87792 | Multiple authorization bypass in WordPress theme design-scuole-wordpress-themeDevelopers Italia · design-scuole-wordpress-theme | High8.7 |
| CVE-2026-87791 | Path traversal vulnerability in WordPress theme design-scuole-wordpress-themeDevelopers Italia · design-scuole-wordpress-theme | High8.7 |
| CVE-2026-89308 | Arbitrary command execution in TrxTimeATTENDANCETREXOM · TrxTimeATTENDANCE | Critical9.3 |
| CVE-2026-59111 | Command Injection vulnerability in eObčanka-IdentifikaceMinistry of the Interior (MVČR) · eObčanka-Identifikace | Critical9.3 |
| CVE-2026-70383 | Arbitrary file overwrite vulnerability in DigiDoc4 clientEstonian Information System Authority (RIA) · DigiDoc4 | High8.4 |
| CVE-2026-22306 | Critical flaw impacting OZOLS ERP's automatic update channelOzols Grupa · OZOLS | Critical10.0 |
| CVE-2026-59109 | Zalktis: SQL injection via partner-controlled fields in imported e-invoicesZalktis Programmas (SIA "Zalktis Programmas") · Zalktis | High8.7 |
| CVE-2026-59112 | Signature validation vulnerability affecting DigiDoc applicationsEstonian Information System Authority (RIA) · libdigidocpp | Medium4.4 |
| CVE-2026-0392 | eParakstītājs 3.0 for Windows – remote code execution via unauthenticated auto-updateLatvijas Valsts radio un televīzijas centrs (LVRTC) · eParakstītājs 3.0 | High7.3 |
| CVE-2026-33591 | Authentication bypass on WaptServerTranquil IT Systems · WAPT Server | Critical10.0 |
| CVE-2026-11946 | GetEndpoints Memory Exhaustion in open62541open62541 project / o6 Automation GmbH · open62541 | High7.5 |
| CVE-2026-33592 | FindServers Memory Exhaustion in open62541open62541 project / o6 Automation GmbH · open62541 | High7.5 |
| CVE-2026-22313 | OS Commands Executed with Administrative Permissions in Radiflow iSAP Smart CollectorRadiflow · iSAP Smart Collector | Critical9.1 |
| CVE-2026-22312 | Use of Hard-coded Credentials Vulnerability in Radiflow iSAP Smart CollectorRadiflow · iSAP Smart Collector | High8.6 |
| CVE-2026-25600 | Credential Exposure Vulnerability in Trac PDBMTrac d.o.o. · PDBM | Medium6.4 |
| CVE-2026-25599 | Missing authentication and clear‑text data transmission affecting Orca heat pumpsOrca Energy · Orca heat pump | Medium6.3 |
| CVE-2026-33590 | Insecure default permissions in Portainer CEPortainer · Portainer Community Edition | High8.5 |
| CVE-2026-25602 | Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server). The MEONA Client transmits the…Mesalvo · Meona Server | Low2.3 |
| CVE-2026-0857 | Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user accounts whose password was last set…Mesalvo · Meona Client | Medium4.4 |
| CVE-2026-0856 | Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of…Mesalvo · Meona Client | High7.8 |
| CVE-2026-33585 | Arqit SKA-Platform Improper Handling of Parameters VulnerabilityArqit · Symmetric Key Agreement Platform | Low3.8 |
| CVE-2026-33584 | Arqit SKA-Platform Enables Access to Debug InformationArqit · Symmetric Key Agreement Platform | Medium5.3 |
| CVE-2026-33583 | Arqit SKA-Platform Vulnerable to Key ExposureArqit · Symmetric Key Agreement Platform | High8.7 |