Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,791All CVEsplus 19,141 rejected
- 649Last 24 hours3,086 in the last 7 days
- 17,141Last 30 days1,603 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 79 | 147 | 124 | 6 | 0 | 356 | 882 |
| 2025 | 44 | 74 | 88 | 2 | 0 | 208 | 526 |
| 2024 | 58 | 33 | 32 | 0 | 0 | 123 | 318 |
| 2023 | 102 | 30 | 38 | 0 | 1 | 171 | 195 |
| 2022 | 7 | 6 | 8 | 0 | 0 | 21 | 24 |
| 2021 | 2 | 0 | 1 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-92080 | Path Traversal Leading to Arbitrary Mount in TÜBİTAK BİLGEM's pardus-boot-repairTÜBİTAK BİLGEM Software Technologies Research Institute · pardus-boot-repair | Medium4.3 |
| CVE-2026-105422 | Path Traversal in TÜBİTAK BİLGEM's pardus-boot-repairTÜBİTAK BİLGEM Software Technologies Research Institute · pardus-boot-repair | Medium6.6 |
| CVE-2026-76563 | HTML Injection in FileorbisFileorbis Informatics Services Trade Inc. · Fileorbis | Medium6.1 |
| CVE-2026-105321 | SQL Injection in Kobikom Telecommunications' KobikomKobikom Telecommunications and Informatics Services Inc. · Kobikom | High7.5 |
| CVE-2026-104720 | Path Traversal in Kobikom Telecommunications' KobikomKobikom Telecommunications and Informatics Services Inc. · Kobikom | High7.5 |
| CVE-2026-95652 | Improper Device Validation Allows Privileged Disk Formatting in TÜBİTAK BİLGEM's pardus-usb-formatterTÜBİTAK BİLGEM Software Technologies Research Institute · pardus-usb-formatter | Medium6.6 |
| CVE-2026-19731 | Path Traversal in TÜBİTAK BİLGEM's İmzagerTÜBİTAK BİLGEM Software Technologies Research Institute · İmzager | Low3.3 |
| CVE-2026-19721 | XXE in TÜBİTAK BİLGEM's İmzagerTÜBİTAK BİLGEM Software Technologies Research Institute · İmzager | Low3.3 |
| CVE-2026-74993 | SQL Injection in Starnet Computer Systems' Inventory Tracking ApplicationStarnet Computer and Network Systems · Inventory Tracking Application | High7.5 |
| CVE-2026-92886 | Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-registerTÜBİTAK BİLGEM Software Technologies Research Institute · eta-register | High7.8 |
| CVE-2026-86715 | Clear Text Storage of Password in Crypttech's Vatos DLPCrypttech Crypto and Informatics Technologies Industry and Trade Inc. · Vatos DLP | High7.1 |
| CVE-2026-105457 | Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYSHAVELSAN Inc. · Liman MYS | Medium6.5 |
| CVE-2026-16020 | Stored XSS Fazile BACAK's DefterAsist Financial Advisor PlatformFazile BACAK · DefterAsist Financial Advisor Platform | Medium5.4 |
| CVE-2026-16307 | IDOR in Netiket Information Technologies' EdoWEBNetiket Information Technologies · EdoWEB | Medium4.3 |
| CVE-2026-92546 | Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic AllyKeepnet Labs Cybersecurity Inc. · Agentic AI / Agentic Ally | High7.5 |
| CVE-2026-15586 | OTP Brute-Force Account Takeover in Idvlabs Software's Ontimeİdvlabs Software and Consulting Services Inc. · Ontime | Medium5.3 |
| CVE-2026-100164 | User Enumeration in Rolantis Information Technologies' AgentisRolantis Information Technologies Tourism Industry and Trade Co. Ltd. · Agentis | High7.5 |
| CVE-2026-105323 | Reflected XSS in Kulga Software's Kulga News SoftwareKulga Software and Telecommunications Limited Company · Kulga News Software | Medium6.1 |
| CVE-2026-105947 | Arbitrary File Read in Innotim Software's Logsign SIEMInnotim Software, Telecommunications, and Consulting Co. Ltd. · Logsign SIEM | Medium6.5 |
| CVE-2026-94380 | Host Header Injection in HAVELSAN's Liman MYSHAVELSAN Inc. · Liman MYS | High8.1 |
| CVE-2026-18205 | XSS in Ticimax Informatics' Ticimax E-Commerce PlatformTicimax Informatics Technologies Inc. · Ticimax E-Commerce Platform | Medium6.1 |
| CVE-2026-15575 | Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's CostifierSFM Software Technologies Inc. · Costifier | Medium5.3 |
| CVE-2026-15219 | IDOR in SFM Software's CostifierSFM Software Technologies Inc. · Costifier | Medium6.5 |
| CVE-2026-14177 | User Enumeration via Password Reset in IKAS Technology Inc.'s ikas E-Commerce InfrastructureIKAS Technology Inc. · ikas E-Commerce Infrastructure | High7.5 |
| CVE-2026-16740 | Missing Authentication for Critical Function in TR7 Cyber Defense's TR7 ASPTR7 Cyber Defense Inc. · TR7 ASP | Critical9.8 |
| CVE-2026-16741 | OS Command in TR7 Cyber Defense's TR7 ASPTR7 Cyber Defense Inc. · TR7 ASP | Critical9.8 |
| CVE-2026-89279 | Active Directory Password Change CSRF in AuthTake Technology's authtakeAuthTake Technology Inc. · authtake | Medium6.5 |
| CVE-2026-13138 | Improper Authorization in Divasoft Software's Biletiva Ticketing PlatformDivasoft Software and E-Commerce Inc. · Biletiva Ticketing Platform | High8.6 |
| CVE-2026-12613 | Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document EditorMinistry of Justice General Directorate of Information Technology · UYAP Document Editor | High8.8 |
| CVE-2026-18390 | Command Injection in Ministry of Justice's UYAP Document EditorMinistry of Justice General Directorate of Information Technology · UYAP Document Editor | High7.8 |
| CVE-2026-90983 | OTP Code Exposure in Hayat Hospital's Hayat MobileHayat Health Facilities Inc. (Hayat Hospital) · Hayat Mobile | High8.2 |
| CVE-2026-92085 | Stored XSS in TMT Machine's Talassoft Industrial Management SoftwareTMT Machinery Industry and Trade Co. Ltd. · Talassoft Industrial Management Software | Medium5.4 |
| CVE-2026-86405 | Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShopSipay Electronic Money and Payment Services Inc. · PrestaShop Virtual POS Module | Critical9.8 |
| CVE-2026-85531 | Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.xSipay Electronic Money and Payment Services Inc. · OpenCart Virtual POS Module | Critical9.8 |
| CVE-2026-12859 | IDOR in Caz Informatics' Advancity ALMS CloudCaz Informatics Services Trade Inc. · Advancity ALMS Cloud | Medium6.5 |
| CVE-2026-89290 | HTML Injection in İzometri Informatics' eimzamipİzometri IT Services Domestic and Foreign Trade Co. Ltd. · eimzamip | Low3.5 |
| CVE-2026-91844 | Remote Code Execution via Unrestricted File Upload in İzometri Informatics' eimzamipİzometri IT Services Domestic and Foreign Trade Co. Ltd. · eimzamip | High7.3 |
| CVE-2026-19218 | Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezztaAKIN Software Computer Import-Export Industry and Trade Co. Ltd. · MyRezzta | Critical9.1 |
| CVE-2026-92555 | Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control PanelAKIN Software Computer Import-Export Industry and Trade Co. Ltd. · AKINSOFT WOLVOX Control Panel | Critical9.8 |
| CVE-2026-19083 | IDOR in AKIN Software's OctoCloudAKIN Software Computer Import-Export Industry and Trade Co. Ltd. · OctoCloud | High8.8 |
| CVE-2026-85523 | OS Command Injection in Felisify Informatics' SambaBoxFelisify Information Technologies Industry and Trade Inc. · SambaBox | High8.8 |
| CVE-2026-82924 | PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert MailPusula Communication, IT, and Internet Industry and Trade Co. Ltd. · Expert Mail | Medium5.3 |
| CVE-2026-12380 | Reflected XSS in Akıllı Ticaret's E-Commerce PackAkıllı Ticaret Software Technologies Ltd. Co. · E-Commerce Pack | Medium6.1 |
| CVE-2026-5782 | Reflected XSS in MRV Technology's TurkHotspotMRV Technology Foreign Trade Ltd. Co. · TurkHotspot | Medium5.2 |
| CVE-2026-85215 | SQL Injection in GG Soft's PaperworkGG Soft Software Services Inc. · Paperwork | High7.1 |
| CVE-2026-11795 | User Enumeration in Softtr's E-Commerce PackSofttr Informatics Trading Limited Company · E-Commerce Pack | Medium5.3 |
| CVE-2026-85209 | IDOR in AVEZ Electronics's LMSAVEZ Electronics Communication Training and Consultancy Trade Inc. · Learning Management System (LMS) | Medium6.5 |
| CVE-2026-80298 | SQL Injection in HAVELSAN's Sef - AI Chatbot PlatformHAVELSAN Inc. · Sef - AI Chatbot Platform | High8.8 |
| CVE-2026-80443 | Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot PlatformHAVELSAN Inc. · Sef - AI Chatbot Platform | High7.4 |
| CVE-2026-80337 | Unauthorized Cross-Chatbot Tool Invocation in HAVELSAN's Sef - AI Chatbot PlatformHAVELSAN Inc. · Sef - AI Chatbot Platform | Medium5.3 |