Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 442Last 24 hours2,720 in the last 7 days
- 16,913Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 18 | 135 | 31 | 0 | 184 | 516 |
| 2025 | 6 | 10 | 67 | 37 | 0 | 120 | 332 |
| 2024 | 0 | 6 | 56 | 33 | 0 | 95 | 212 |
| 2023 | 0 | 7 | 56 | 21 | 0 | 84 | 117 |
| 2022 | 0 | 0 | 16 | 9 | 0 | 25 | 33 |
| 2021 | 0 | 1 | 1 | 3 | 0 | 5 | 8 |
| 2020 | 3 | 0 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-93851 | Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted postMattermost · Mattermost | High8.0 |
| CVE-2026-93846 | Team admin can escalate a team member's permissions via the team member roles endpointMattermost · Mattermost | Low3.8 |
| CVE-2026-93848 | Mattermost OpenID discovery endpoint request bypasses outbound connection filtering, allowing SSRF by a System AdministratorMattermost · Mattermost | Low2.7 |
| CVE-2026-93850 | Unbounded memory consumption during PDF text extractionMattermost · Mattermost | Medium6.5 |
| CVE-2026-93849 | Mattermost allows authenticated users to trigger excessive memory allocation via crafted msgpack binary WebSocket framesMattermost · Mattermost | Medium6.5 |
| CVE-2026-93847 | Improper post type validation on scheduled post endpointsMattermost · Mattermost | Low3.5 |
| CVE-2026-116516 | Insufficient length validation when parsing Zoom chat transcriptionsMattermost · Mattermost | Medium6.5 |
| CVE-2026-13411 | Null condition in Playbooks import crashes the pluginMattermost · Mattermost | Medium4.3 |
| CVE-2026-18799 | Mattermost Server fails to restrict Slack import account binding, allowing team admins to forge posts as existing usersMattermost · Mattermost | Medium4.3 |
| CVE-2026-16251 | Mattermost local image proxy allows server memory exhaustion via unbounded image response bufferingMattermost · Mattermost | Medium6.5 |
| CVE-2026-18256 | Private team metadata disclosure via the team search APIMattermost · Mattermost | Medium4.3 |
| CVE-2026-18223 | Mattermost invitation tokens not bound to invited email address allowing unauthorized team and private channel accessMattermost · Mattermost | Medium5.0 |
| CVE-2026-19076 | Mattermost fails to reject OAuth application sessions in account type switch, allowing account takeover via bearer tokenMattermost · Mattermost | Medium4.4 |
| CVE-2026-18560 | Improper order of authorisations in Mattermost GetFile API leads to an authenticated user to determine a post’s quarantined statusMattermost · Mattermost | Medium4.3 |
| CVE-2026-16453 | Mattermost SAML RelayState forgery allows unauthorized team membershipMattermost · Mattermost | High7.1 |
| CVE-2026-19600 | Mattermost logs plaintext authentication tokens in debug-level server logs on failed auth attemptsMattermost · Mattermost | Medium4.5 |
| CVE-2026-19621 | Mattermost leaks interactive-message integration secrets to non-admin users via post-deletion events and thread readsMattermost · Mattermost | Medium6.5 |
| CVE-2026-19603 | Private channel ID disclosure via user status endpointsMattermost · Mattermost | Medium4.3 |
| CVE-2026-18795 | Missing server side validation allowed user to quarantine a DM and GM postMattermost · Mattermost | Medium6.4 |
| CVE-2026-19867 | Uncapped mention keys in user notification properties allow CPU exhaustion during post processingMattermost · Mattermost | Medium4.3 |
| CVE-2026-19601 | Disclosure of AD/LDAP bind password via Test ConnectionMattermost · Mattermost | Medium4.9 |
| CVE-2026-18551 | Mattermost guest account privilege escalation via member roles APIMattermost · Mattermost | Medium6.5 |
| CVE-2026-19541 | Outgoing OAuth connection client secret exposure during connection validationMattermost · Mattermost | Medium6.5 |
| CVE-2026-96260 | Mattermost server missing request body size limit on plugin routes allows denial of service by an authenticated userMattermost · Mattermost | Medium6.5 |
| CVE-2026-96259 | Mattermost server-side request forgery via OAuth endpoints configurable by a System AdministratorMattermost · Mattermost | Medium5.5 |
| CVE-2026-95666 | Unbounded post ID array in the bulk reactions endpoint allows denial of serviceMattermost · Mattermost | Medium4.3 |
| CVE-2026-12284 | Mattermost Desktop App Missing IPC Sender Validation in Calls Leave HandlerMattermost · Mattermost | Low3.8 |
| CVE-2026-75588 | Mattermost Desktop App plugin popout scheme validation bypassMattermost · Mattermost | Low2.6 |
| CVE-2026-75025 | Mattermost Desktop local network access from server-rendered contentMattermost · Mattermost | Medium4.7 |
| CVE-2026-91181 | Data Retention Teams Endpoint Leaks Private Team Invite IDMattermost · Mattermost | Medium6.5 |
| CVE-2026-12985 | Mattermost DCR redirect URI allowlist bypass via improper URL component validationMattermost · Mattermost | Medium6.8 |
| CVE-2026-82920 | Mattermost ABAC parent policy bypass via policy update endpointMattermost · Mattermost | Medium5.5 |
| CVE-2026-86348 | MS Calendar plugin: unrecovered handler panics from malformed post-action requests could crash the plugin processMattermost · Mattermost | Medium4.3 |
| CVE-2026-86349 | Mattermost Server Algorithmic DoS via Unbounded Markdown Block NestingMattermost · Mattermost | Medium4.3 |
| CVE-2026-10556 | Unauthenticated webhook request with null notification entry could crash the Microsoft Calendar plugin.Mattermost · Mattermost | Medium5.3 |
| CVE-2026-13417 | Boards plugin denial of service via unvalidated block fields.propertiesMattermost · Mattermost | Medium4.3 |
| CVE-2026-9812 | Missing property field ownership validation in Playbooks run property update endpointMattermost · Mattermost | Medium6.5 |
| CVE-2026-8821 | Playbooks run owner channel membership permission bypassMattermost · Mattermost | High7.1 |
| CVE-2026-5132 | Unbounded zlib decompression in Calls SDP WebSocket messagesMattermost · Mattermost | Medium6.5 |
| CVE-2026-15814 | Uploading a crafted image causes excessive memory allocation in the Mattermost ServerMattermost · Mattermost | Medium6.5 |
| CVE-2026-10542 | Playbooks channel action update validation issueMattermost · Mattermost | Medium5.0 |
| CVE-2026-14344 | Inconsistent authorization checks in Mattermost Boards endpointsMattermost · Mattermost | Medium4.3 |
| CVE-2026-12882 | Mattermost Markdown autolink parsing denial of serviceMattermost · Mattermost | Medium4.3 |
| CVE-2026-11993 | Fix authenticated members disabling file content indexing server-wide via extraction pool exhaustionMattermost · Mattermost | Medium4.3 |
| CVE-2026-14259 | Board archive import bypasses team board creation permissionsMattermost · Mattermost | Medium4.3 |
| CVE-2026-75587 | Plaintext pre-auth secret exposure via Desktop App diagnostics reportMattermost · Mattermost | Low3.6 |
| CVE-2026-9693 | Mattermost thread memberships persist after team removal, exposing private channel thread metadata on re-inviteMattermost · Mattermost | Low3.5 |
| CVE-2026-9859 | Mattermost Boards plugin didn’t enforce role-based authorization on board channel link allowing board editors to expose boards to arbitrary channelsMattermost · Mattermost | Medium6.5 |
| CVE-2026-9816 | Insufficient server-side validation of board member role fields permits privilege escalationMattermost · Mattermost | High8.3 |
| CVE-2026-10080 | Boards plugin panics on WebSocket command with non-string field typesMattermost · Mattermost | Medium6.5 |