Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 452Last 24 hours2,722 in the last 7 days
- 16,914Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 25 | 9 | 8 | 0 | 0 | 42 | 210 |
| 2025 | 5 | 3 | 10 | 3 | 0 | 21 | 168 |
| 2024 | 15 | 23 | 6 | 0 | 0 | 44 | 147 |
| 2023 | 0 | 33 | 12 | 1 | 0 | 46 | 103 |
| 2022 | 0 | 10 | 14 | 0 | 0 | 24 | 57 |
| 2021 | 1 | 13 | 18 | 1 | 0 | 33 | 33 |
| Title | ||
|---|---|---|
| CVE-2026-28336 | SolarWinds Dameware Command Injection VulnerabilitySolarWinds · Dameware | Critical9.9 |
| CVE-2026-28335 | SolarWinds Dameware Buffer Overflow VulnerabilitySolarWinds · Dameware | High8.4 |
| CVE-2026-28327 | SolarWinds Dameware DLL Hijacking VulnerabilitySolarWinds · Dameware | High8.2 |
| CVE-2026-28330 | SolarWinds Observability Self-Hosted Cross-Site Scripting VulnerabilitySolarWinds · SolarWinds Observability Self-Hosted | Medium4.6 |
| CVE-2026-28329 | SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)SolarWinds · SolarWinds Observability Self-Hosted | Medium6.4 |
| CVE-2026-28328 | SolarWinds Observability Self-Hosted broken authorization schemaSolarWinds · SolarWinds Observability Self-Hosted | High8.8 |
| CVE-2026-28331 | SolarWinds Patch Manager Sensitive Information Exposure VulnerabilitySolarWinds · Patch Manager | Medium4.4 |
| CVE-2026-28325 | SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution VulnerabilitySolarWinds · Observability Self-Hosted | High8.8 |
| CVE-2026-28324 | SolarWinds Observability Self-Hosted Remote Code Execution VulnerabilitySolarWinds · Observability Self-Hosted | Critical9.8 |
| CVE-2026-28326 | SolarWinds Access Rights Manager Unauthenticated Remote Code Execution VulnerabilitySolarWinds · Access Rights Manager | High8.8 |
| CVE-2026-28323 | SolarWinds Web Help Desk SAML Authentication Bypass VulnerabilitySolarWinds · Web Help Desk | Critical9.8 |
| CVE-2026-28321 | SolarWinds Serv-U Broken Access Control VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28317 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28316 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28315 | SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) VulnerabilitySolarWinds · Serv-U | Medium6.2 |
| CVE-2026-28314 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28313 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28312 | SolarWinds Serv-U Privilege Escalation VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28310 | SolarWinds Serv-U Privilege Escalation VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28309 | SolarWinds Serv-U Broken Access Control VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28308 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28307 | SolarWinds Serv-U Privilege Escalation VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28306 | SolarWinds Serv-U Privilege Escalation VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28305 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28304 | SolarWinds Serv-U Remote Code Execution VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28302 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2026-28322 | SolarWinds Database Performance Analyzer Stored Cross-Site Scripting VulnerabilitySolarWinds · Database Performance Analyzer | Medium5.6 |
| CVE-2026-28301 | SolarWinds Observability Self-Hosted Open Redirect VulnerabilitySolarWinds · Observability Self-Hosted | Medium4.8 |
| CVE-2026-28318 | SolarWinds Serv-U Unauthenticated Denial of Service VulnerabilityExploitedSolarWinds · Serv-U | High7.5 |
| CVE-2026-28299 | SolarWinds Web Help Desk Denial-of-Service VulnerabilitySolarWinds · Web Help Desk | High8.2 |
| CVE-2026-28298 | SolarWinds Observability Self-Hosted Stored Cross-Site Scripting VulnerabilitySolarWinds · SolarWinds Observability Self-Hosted | Medium5.9 |
| CVE-2026-28297 | SolarWinds Observability Self-Hosted Stored Cross-Site Scripting VulnerabilitySolarWinds · SolarWinds Observability Self-Hosted | Medium6.1 |
| CVE-2025-40541 | SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2025-40540 | SolarWinds Serv-U Type Confusion Remote Code Execution VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2025-40539 | SolarWinds Serv-U Type Confusion Remote Code Execution VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2025-40538 | SolarWinds Serv-U Broken Access Control Remote Code Execution VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2025-40554 | SolarWinds Web Help Desk Authentication Bypass VulnerabilitySolarWinds · Web Help Desk | Critical9.8 |
| CVE-2025-40553 | SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds · Web Help Desk | Critical9.8 |
| CVE-2025-40552 | SolarWinds Web Help Desk Authentication Bypass VulnerabilitySolarWinds · Web Help Desk | Critical9.8 |
| CVE-2025-40551 | SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution VulnerabilityExploitedSolarWinds · Web Help Desk | Critical9.8 |
| CVE-2025-40537 | SolarWinds Web Help Desk Hardcoded Credentials VulnerabilitySolarWinds · Web Help Desk | High7.5 |
| CVE-2025-40536 | SolarWinds Web Help Desk Security Control Bypass VulnerabilityExploitedSolarWinds · Web Help Desk | High8.1 |
| CVE-2025-40545 | SolarWinds Observability Self-Hosted Open Redirection VulnerabilitySolarWinds · SolarWinds Observability Self-Hosted | Medium4.8 |
| CVE-2025-26391 | SolarWinds Observability Self-Hosted XSS VulnerabilitySolarWinds · SolarWinds Observability Self-Hosted | Medium5.4 |
| CVE-2025-40549 | SolarWinds Serv-U Path Restriction Bypass VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2025-40548 | SolarWinds Serv-U Broken Access Control - Remote Code Execution VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2025-40547 | SolarWinds Serv-U Logic Abuse - Remote Code Execution VulnerabilitySolarWinds · Serv-U | Critical9.1 |
| CVE-2025-26392 | SolarWinds Observability Self-Hosted SQL Injection VulnerabilitySolarWinds · Observability Self-Hosted | Medium5.4 |
| CVE-2025-26399 | SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation VulnerabilityExploitedSolarWinds · Web Help Desk | Critical9.8 |
| CVE-2024-28988 | SolarWinds Web Help Desk Java Deserialization Remote Code Execution VulnerabilitySolarWinds · Web Help Desk | Critical9.8 |