Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 453Last 24 hours2,722 in the last 7 days
- 16,916Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 44 | 114 | 45 | 0 | 0 | 203 | 203 |
| Title | ||
|---|---|---|
| CVE-2026-105107 | Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parametersKoha Community · Koha | High7.2 |
| CVE-2026-105106 | Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled taskKoha Community · Koha | High8.8 |
| CVE-2026-105110 | Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI ParameterIskratel · Innbox | Critical9.3 |
| CVE-2026-105105 | Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltrationNASA-AMMOS · AIT-Core | Critical9.8 |
| CVE-2026-72610 | Koha Community Koha - Stored SQL Injection via Patron lang Field in Issue Slip GenerationKoha Community · Koha | Medium4.3 |
| CVE-2026-72609 | Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.plKoha Community · Koha | High7.1 |
| CVE-2026-72608 | Koha Community Koha - Stored SQL Injection via Patron Card Layout image_nameKoha Community · Koha | Medium6.5 |
| CVE-2026-72607 | Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by AgeKoha Community · Koha | High7.1 |
| CVE-2026-72606 | Pinry Pinry - Server-Side Request ForgeryPinry · Pinry | High7.5 |
| CVE-2026-72605 | Swing Music Swing Music - Missing AuthenticationSwing Music · Swing Music | High7.5 |
| CVE-2026-72604 | Intelliants Subrion CMS - Path TraversalIntelliants · Subrion CMS | Medium6.5 |
| CVE-2026-72603 | wg-easy wg-easy - OS Command Injectionwg-easy · wg-easy | Critical9.9 |
| CVE-2026-72602 | AsyncFuncAI deepwiki-open - Path TraversalAsyncFuncAI · deepwiki-open | High7.5 |
| CVE-2026-72601 | CSZ CMS CSZ CMS - Broken Access ControlCSZ CMS · CSZ CMS | High7.5 |
| CVE-2026-72600 | Idurar IDURAR ERP CRM - Broken Access ControlIdurar · IDURAR ERP CRM | High7.5 |
| CVE-2026-72599 | e107 e107 - SQL Injectione107 · e107 | Critical9.8 |
| CVE-2026-72598 | Apioo Fusio - Server-Side Request ForgeryApioo · Fusio | Medium6.5 |
| CVE-2026-72597 | Friendica Friendica - Server-Side Request ForgeryFriendica · Friendica | Medium6.5 |
| CVE-2026-72596 | Ghost Foundation Ghost - Broken Access ControlGhost Foundation · Ghost | High8.1 |
| CVE-2026-72595 | BadChoice Handesk - Broken Access ControlBadChoice · Handesk | High8.1 |
| CVE-2026-72563 | BadChoice Handesk - Broken Access ControlBadChoice · Handesk | High8.1 |
| CVE-2026-72562 | Pimcore pimcore admin-ui-classic-bundle - SQL InjectionPimcore · pimcore admin-ui-classic-bundle | High8.8 |
| CVE-2026-72561 | Peppermint Lab Peppermint - Broken Access ControlPeppermint Lab · Peppermint | High8.8 |
| CVE-2026-72560 | HumanSignal Label Studio - Server-Side Request ForgeryHumanSignal · Label Studio | Medium6.5 |
| CVE-2026-72559 | Daniel Brendel HortusFox - Cross-Site ScriptingDaniel Brendel · HortusFox | Medium5.4 |
| CVE-2026-72558 | CiviCRM CiviCRM - SQL InjectionCiviCRM · CiviCRM | High8.8 |
| CVE-2026-72557 | Cockpit CMS Cockpit CMS - Unrestricted File UploadCockpit CMS · Cockpit CMS | High8.8 |
| CVE-2026-72556 | ZoneMinder ZoneMinder - Remote Code ExecutionZoneMinder · ZoneMinder | High8.8 |
| CVE-2026-72555 | Peppermint Lab Peppermint - Broken Access ControlPeppermint Lab · Peppermint | High8.1 |
| CVE-2026-72554 | Ladybird Web Solution Faveo Helpdesk - Broken Access ControlLadybird Web Solution · Faveo Helpdesk | Medium6.5 |
| CVE-2026-72553 | ElkArte Forum ElkArte - Cross-Site ScriptingElkArte Forum · ElkArte | Medium5.4 |
| CVE-2026-72552 | Dub Dub - Server-Side Request ForgeryDub · Dub | High7.5 |
| CVE-2026-72551 | Apioo Fusio - Remote Code ExecutionApioo · Fusio | High8.8 |
| CVE-2026-72550 | Friendica Friendica - SQL InjectionFriendica · Friendica | Critical9.8 |
| CVE-2026-72549 | OpenSignLabs OpenSign - Information DisclosureOpenSignLabs · OpenSign | Medium5.3 |
| CVE-2026-72548 | OpenSignLabs OpenSign - Information DisclosureOpenSignLabs · OpenSign | High7.5 |
| CVE-2026-72547 | Attendize Attendize - Insecure Direct Object ReferenceAttendize · Attendize | High7.1 |
| CVE-2026-72546 | Attendize Attendize - Insecure Direct Object ReferenceAttendize · Attendize | High7.1 |
| CVE-2026-72545 | OpenSignLabs OpenSign - Insecure Direct Object ReferenceOpenSignLabs · OpenSign | High7.5 |
| CVE-2026-72544 | OpenSignLabs OpenSign - Insufficient Verification of Data AuthenticityOpenSignLabs · OpenSign | High7.5 |
| CVE-2026-72543 | OpenSignLabs OpenSign - Insecure Direct Object ReferenceOpenSignLabs · OpenSign | High7.5 |
| CVE-2026-72542 | Windmill Labs Windmill - Missing AuthorizationWindmill Labs · Windmill | Medium5.4 |
| CVE-2026-72541 | Windmill Labs Windmill - Missing AuthorizationWindmill Labs · Windmill | Medium6.5 |
| CVE-2026-72539 | Windmill Labs Windmill - Information DisclosureWindmill Labs · Windmill | Medium6.5 |
| CVE-2026-72538 | PrefectHQ Prefect - Argument InjectionPrefectHQ · Prefect | High8.8 |
| CVE-2026-72537 | Authentik Security authentik - Privilege EscalationAuthentik Security · authentik | High8.8 |
| CVE-2026-72536 | Chaskiq Chaskiq - Missing AuthenticationChaskiq · Chaskiq | High8.2 |
| CVE-2026-72535 | Chaskiq Chaskiq - Missing AuthenticationChaskiq · Chaskiq | High8.2 |
| CVE-2026-72534 | Authentik Security authentik - Privilege EscalationAuthentik Security · authentik | High8.8 |
| CVE-2026-72533 | Portainer Portainer CE - Authentication BypassPortainer · Portainer CE | High8.8 |