Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 443Last 24 hours2,721 in the last 7 days
- 16,923Last 30 days1,562 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 99 | 200 | 284 | 7 | 2 | 592 | 6,652 |
| 2025 | 16 | 70 | 177 | 11 | 0 | 274 | 6,060 |
| 2024 | 15 | 84 | 261 | 1 | 0 | 361 | 5,786 |
| 2023 | 13 | 66 | 183 | 0 | 1 | 263 | 5,425 |
| 2022 | 33 | 74 | 208 | 1 | 0 | 316 | 5,162 |
| 2021 | 45 | 252 | 289 | 0 | 0 | 586 | 4,846 |
| 2020 | 39 | 237 | 276 | 6 | 0 | 558 | 4,260 |
| 2019 | 21 | 231 | 314 | 0 | 0 | 566 | 3,702 |
| 2018 | 53 | 197 | 209 | 5 | 0 | 464 | 3,136 |
| 2017 | 29 | 154 | 283 | 0 | 0 | 466 | 2,672 |
| 2016 | 31 | 182 | 139 | 2 | 0 | 354 | 2,206 |
| 2015 | 1 | 124 | 356 | 8 | 0 | 489 | 1,852 |
| 2014 | 0 | 106 | 257 | 2 | 0 | 365 | 1,363 |
| 2013 | 0 | 129 | 300 | 3 | 0 | 432 | 998 |
| 2012 | 0 | 90 | 64 | 5 | 0 | 159 | 566 |
| 2011 | 0 | 109 | 22 | 2 | 0 | 133 | 407 |
| 2010 | 1 | 100 | 10 | 0 | 0 | 111 | 274 |
| 2009 | 0 | 63 | 19 | 3 | 0 | 85 | 163 |
| 2008 | 0 | 64 | 9 | 0 | 0 | 73 | 78 |
| 2007 | 0 | 3 | 2 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-20241 | Cisco Identity Services Engine Authorization Bypass VulnerabilityCisco · Cisco Identity Services Engine Software | Medium5.3 |
| CVE-2026-76419 | Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityCisco · Cisco Unified Communications Manager | Medium6.1 |
| CVE-2026-76506 | Cisco Unified Computing System Central Remote Code Execution VulnerabilityCisco · Cisco Unified Computing System Central Software | High7.6 |
| CVE-2026-76418 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityExploitedCisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | High8.6 |
| CVE-2026-76531 | Files or Directories Accessible to External Parties in Splunk SOARSplunk · Splunk SOAR | Critical9.9 |
| CVE-2026-76530 | Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOARSplunk · Splunk SOAR | High8.8 |
| CVE-2026-76529 | Improper Protection of Alternate Path in Splunk SOARSplunk · Splunk SOAR | Critical9.8 |
| CVE-2026-76528 | Protection Mechanism Failure in Splunk SOARSplunk · Splunk SOAR | Critical9.8 |
| CVE-2026-76527 | Improper Check or Handling of Exceptional Conditions in Splunk SOARSplunk · Splunk SOAR | Critical9.8 |
| CVE-2026-76526 | Improper Neutralization in Splunk SOARSplunk · Splunk SOAR | High8.8 |
| CVE-2026-76408 | Improper Control of a Resource Through its Lifetime in Splunk SOARSplunk · Splunk SOAR | Critical9.8 |
| CVE-2026-76407 | Improper Access Control in Splunk SOARSplunk · Splunk SOAR | Critical9.8 |
| CVE-2026-76406 | Information Disclosure through REST API Authentication in Splunk SOARSplunk · Splunk SOAR | Medium5.9 |
| CVE-2026-76308 | Missing Authorization through the REST API in Splunk SOARSplunk · Splunk SOAR | Medium6.5 |
| CVE-2026-76307 | Sensitive Information Disclosure through REST API Query Filters in Splunk SOARSplunk · Splunk SOAR | High7.2 |
| CVE-2026-76306 | Information Disclosure through REST API Query Filters in Splunk SOARSplunk · Splunk SOAR | High7.5 |
| CVE-2026-76305 | Improper Access Control during App Downloads in Splunk SOARSplunk · Splunk SOAR | Medium6.5 |
| CVE-2026-76304 | Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOARSplunk · Splunk SOAR | Medium4.3 |
| CVE-2026-76303 | Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOARSplunk · Splunk SOAR | Medium5.7 |
| CVE-2026-76302 | Security Hardening in Splunk Enterprise - October 2026Splunk · Splunk Enterprise | Critical9.9 |
| CVE-2026-76301 | Security Hardening in Splunk Enterprise - October 2026Splunk · Splunk Enterprise | Critical9.8 |
| CVE-2026-76300 | Security Hardening in Splunk Enterprise - October 2026Splunk · Splunk Enterprise | High8.8 |
| CVE-2026-76299 | Security Hardening in Splunk Enterprise - October 2026Splunk · Splunk Enterprise | Critical9.9 |
| CVE-2026-76298 | Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk EnterpriseSplunk · Splunk Enterprise | High8.8 |
| CVE-2026-76297 | Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.2 |
| CVE-2026-76296 | Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76295 | SPL Injection through the REST API in Splunk Secure GatewaySplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76294 | Improper Access Control in Field Extraction Management in Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76293 | Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk EnterpriseSplunk · Splunk Enterprise | High7.2 |
| CVE-2026-76292 | Missing Authorization through REST API Endpoints in Splunk Secure GatewaySplunk · Splunk Enterprise | Medium6.5 |
| CVE-2026-76291 | Improper Access Control through Scheduled Search Safeguards in Splunk EnterpriseSplunk · Splunk Enterprise | High8.8 |
| CVE-2026-76290 | Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk EnterpriseSplunk · Splunk Enterprise | High7.5 |
| CVE-2026-76289 | Denial of Service (DoS) through the REST API in Splunk EnterpriseSplunk · Splunk Enterprise | Medium6.5 |
| CVE-2026-76288 | Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk EnterpriseSplunk · Splunk Enterprise | High7.5 |
| CVE-2026-76287 | Authorization Bypass in the Data Management REST API in Splunk EnterpriseSplunk · Splunk Enterprise | Medium5.4 |
| CVE-2026-76497 | Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File VulnerabilitiesCisco · Cisco TelePresence Video Communication Server (VCS) Expressway | Medium6.6 |
| CVE-2026-76505 | Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service VulnerabilityCisco · Cisco IOS XR Software | High7.5 |
| CVE-2026-76524 | Open Source Snort 3 Control Channel Socket Aribitrary Command Execution VulnerabilityCisco · Cisco Open Source Snort3 | High7.8 |
| CVE-2026-76496 | Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution VulnerabilitiesCisco · Cisco TelePresence Video Communication Server (VCS) Expressway | High7.0 |
| CVE-2026-76495 | Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment VulnerabilitiesCisco · Cisco TelePresence Video Communication Server (VCS) Expressway | High7.8 |
| CVE-2026-76494 | Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection VulnerabilitiesCisco · Cisco TelePresence Video Communication Server (VCS) Expressway | High7.8 |
| CVE-2026-76493 | Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception VulnerabilitiesCisco · Cisco TelePresence Video Communication Server (VCS) Expressway | High7.5 |
| CVE-2026-76490 | Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write VulnerabilitiesCisco · Cisco TelePresence Video Communication Server (VCS) Expressway | High8.6 |
| CVE-2026-76489 | Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service VulnerabilityCisco · Cisco Open Source Snort3 | Medium5.8 |
| CVE-2026-76492 | Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer VulnerabilitiesCisco · Cisco TelePresence Video Communication Server (VCS) Expressway | High7.5 |
| CVE-2026-76491 | Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service VulnerabilitiesCisco · Cisco TelePresence Video Communication Server (VCS) Expressway | High7.5 |
| CVE-2026-76481 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions VulnerabilitiesCisco · Cisco Emergency Responder | High7.5 |
| CVE-2026-76487 | Cisco Unified Communications Manager Improper Access Control VulnerabilityCisco · Cisco Unified Communications Manager | Medium5.3 |
| CVE-2026-76479 | Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal VulnerabilitiesCisco · Cisco Emergency Responder | High7.8 |
| CVE-2026-76478 | Cisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control VulnerabilitiesCisco · Cisco Emergency Responder | High8.8 |