Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,118All CVEsplus 19,119 rejected
- 460Last 24 hours2,757 in the last 7 days
- 16,877Last 30 days1,552 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 27 | 106 | 43 | 6 | 0 | 182 | 327 |
| 2025 | 1 | 23 | 10 | 0 | 0 | 34 | 145 |
| 2024 | 21 | 51 | 17 | 0 | 0 | 89 | 111 |
| 2023 | 4 | 13 | 5 | 0 | 0 | 22 | 22 |
| Title | ||
|---|---|---|
| CVE-2026-90872 | Server-Side Script Injection in Manager Web UI in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium6.6 |
| CVE-2026-90871 | Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium5.3 |
| CVE-2026-90870 | Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium5.3 |
| CVE-2026-90869 | Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP ServerProgress Software · WS_FTP Server | High7.5 |
| CVE-2026-90868 | OS Command Injection in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.9 |
| CVE-2026-90867 | Improper Access Control of Web Admin Console in Progress WS_FTP ServerProgress Software · WS_FTP Server | High8.1 |
| CVE-2026-90866 | Virtual Folder Path Confinement Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.1 |
| CVE-2026-90865 | Command Injection via FTP Notification Variables in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.0 |
| CVE-2026-90864 | Host Administrator Path Containment Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical9.1 |
| CVE-2026-90863 | Privilege Escalation via Missing Authorization in WS_FTP ManagerProgress Software · WS_FTP Server | Critical9.1 |
| CVE-2026-90862 | Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium4.3 |
| CVE-2026-90861 | Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP ServerProgress Software · WS_FTP Server | Medium6.6 |
| CVE-2026-84296 | SSH Multi-Factor Authentication Bypass in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium6.8 |
| CVE-2026-84295 | Improper Authentication in Progress WS_FTP ServerProgress Software · WS_FTP Server | Critical10.0 |
| CVE-2026-84294 | Information Disclosure in Ad Hoc Transfer in Progress WS_FTP ServerProgress Software · WS_FTP Server | High7.7 |
| CVE-2026-118037 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118036 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question AnsweringProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118035 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118040 | Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118039 | XML External Entity Reference in Telerik Document Processing Libraries SVG Image ProcessingProgress Software · Telerik Document Processing Libraries | High7.5 |
| CVE-2026-118038 | Path Traversal in Telerik Document Processing Libraries AI Agent ToolsProgress Software · Telerik Document Processing Libraries | High7.1 |
| CVE-2026-108116 | MDX and SOAP Injection in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | High7.5 |
| CVE-2026-106153 | Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendarProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106151 | Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106150 | Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and TooltipProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106149 | Cross-site Scripting (XSS) in Kendo UI for jQuery MenuProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106148 | Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106147 | Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106161 | Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106160 | Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium5.4 |
| CVE-2026-106159 | Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106158 | Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106157 | Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106162 | Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryProgress Software · Kendo UI for jQuery | Medium4.7 |
| CVE-2026-106163 | Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserProgress Software · Kendo UI for jQuery | Medium6.5 |
| CVE-2026-89077 | MOVEit Transfer Identity validation flaw in SFTP authenticationProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89076 | MOVEit Transfer SQL injection in custom reportingProgress · MOVEit Transfer | High7.2 |
| CVE-2026-89075 | MOVEit Transfer Local Disclosure of Session Information VulnerabilityProgress · MOVEit Transfer | High7.3 |
| CVE-2026-89074 | MOVEit Transfer Email MFA BypassProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89073 | MOVEit Transfer Access restriction bypass in OAuth authenticationProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89072 | MOVEit Transfer Authorization Flaw in Certificate ManagementProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89071 | MOVEit Transfer LDAP injection in certificate-based authenticationProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89070 | MOVEit Transfer OIDC Authentication Replay VulnerabilityProgress · MOVEit Transfer | High7.5 |
| CVE-2026-89069 | MOVEit Transfer Stored XSS Vulnerability in Ad Hoc PackagesProgress · MOVEit Transfer | High8.0 |
| CVE-2026-89068 | MOVEit Transfer Authentication bypass in LDAP sign-onProgress · MOVEit Transfer | High8.1 |
| CVE-2026-89067 | MOVEit Transfer Secure Messaging Authentication BypassProgress · MOVEit Transfer | High8.8 |
| CVE-2026-87093 | MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege EscalationProgress · MOVEit Transfer | High8.8 |
| CVE-2026-85976 | HTTP response splitting in Progress MarkLogic Server Query ConsoleProgress Software Corporation · MarkLogic Server | Medium5.4 |
| CVE-2026-85975 | Cleartext transmission in Progress MarkLogic Server Amazon S3 connectionsProgress Software Corporation · MarkLogic Server | High7.5 |
| CVE-2026-85974 | Improper TLS hostname verification in Progress MarkLogic ServerProgress Software Corporation · MarkLogic Server | High7.4 |