Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 399,674All CVEsplus 18,867 rejected
- 536Last 24 hours2,967 in the last 7 days
- 17,040Last 30 days1,515 of them critical
- 1,766Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 11 | 62 | 23 | 3 | 0 | 99 | 836 |
| 2025 | 2 | 63 | 15 | 1 | 0 | 81 | 737 |
| 2024 | 0 | 28 | 21 | 1 | 0 | 50 | 656 |
| 2023 | 1 | 33 | 20 | 0 | 0 | 54 | 606 |
| 2022 | 1 | 58 | 48 | 3 | 0 | 110 | 552 |
| 2021 | 10 | 51 | 21 | 0 | 0 | 82 | 442 |
| 2020 | 10 | 68 | 38 | 2 | 0 | 118 | 360 |
| 2019 | 7 | 45 | 49 | 1 | 0 | 102 | 242 |
| 2018 | 1 | 46 | 41 | 1 | 0 | 89 | 140 |
| 2017 | 3 | 25 | 23 | 0 | 0 | 51 | 51 |
| Title | ||
|---|---|---|
| CVE-2026-104939 | NGINX Ingress Controller vulnerabilityF5 · NGINX Ingress Controller | High8.7 |
| CVE-2026-101019 | NGINX ngx_http_js_module vulnerabilityF5 · NGINX JavaScript | High8.3 |
| CVE-2026-101025 | NGINX ngx_http_js_module vulnerabilityF5 · NGINX JavaScript | Medium6.9 |
| CVE-2026-95101 | NGINX ngx_http_v3_module vulnerabilityF5 · NGINX Plus | Medium6.9 |
| CVE-2026-94197 | NGINX Ingress Controller vulnerabilityF5 · NGINX Ingress Controller | High8.7 |
| CVE-2026-96615 | NGINX Gateway Fabric vulnerabilityF5 · NGINX Gateway Fabric | High7.1 |
| CVE-2026-91184 | NGINX Gateway Fabric vulnerabilityF5 · NGINX Gateway Fabric | High8.7 |
| CVE-2026-97205 | NGINX ngx_http_core_module vulnerabilityF5 · NGINX Plus | Critical9.2 |
| CVE-2026-93479 | NGINX map directive and regex matching vulnerabilityF5 · NGINX Plus | Critical9.2 |
| CVE-2026-97629 | NGINX ngx_http_ssl_module vulnerabilityF5 · NGINX Plus | High8.3 |
| CVE-2026-15176 | NGINX ngx_http_core_module vulnerabilityF5 · NGINX Plus | Critical9.2 |
| CVE-2026-94127 | BIG-IP APM OAuth vulnerabilityExploitedF5 · BIG-IP | Critical9.3 |
| CVE-2026-90439 | NGINX ngx_http_v3_module vulnerabilityF5 · NGINX Plus | Medium6.9 |
| CVE-2026-78222 | NGINX ngx_http_js_module vulnerabilityF5 · NGINX JavaScript | High8.7 |
| CVE-2026-78689 | NGINX ngx_http_js_module vulnerablilityF5 · NGINX JavaScript | Critical9.2 |
| CVE-2026-77180 | NGINX Ingress Controller vulnerabilityF5 · NGINX Ingress Controller | High8.7 |
| CVE-2026-66362 | NGF vulnerabilityF5 · NGINX Gateway Fabric | High8.6 |
| CVE-2026-18329 | NGINX ngx_http_js_module vulnerabilityF5 · NGINX JavaScript | High8.8 |
| CVE-2026-66842 | BIG-IP and BIG-IQ Configuration utility vulnerabilityF5 · BIG-IP | High8.7 |
| CVE-2026-63020 | BIG-IP Configuration utility vulnerabilityF5 · BIG-IP | Low2.3 |
| CVE-2026-60005 | NGINX ngx_http_slice_module vulnerabilityF5 · NGINX Plus | High8.8 |
| CVE-2026-60065 | NGINX Plus ngx_stream_mqtt_filter_module vulnerabilityF5 · NGINX Plus | Medium6.3 |
| CVE-2026-56434 | NGINX ngx_http_ssi_module vulnerabilityF5 · NGINX Plus | High8.3 |
| CVE-2026-42533 | NGINX Map directive and Regex matching vulnerabilityF5 · NGINX Plus | Critical9.2 |
| CVE-2026-60062 | NGINX Agent VulnerabilityF5 · NGINX Agent | Medium5.3 |
| CVE-2026-52865 | NGINX Ingress Controller vulnerabilityF5 · NGINX Ingress Controller | High7.1 |
| CVE-2026-55723 | NGINX Ingress Controller vulnerabilityF5 · NGINX Ingress Controller | High8.7 |
| CVE-2026-59762 | BIG-IP HTTP/2 vulnerabilityF5 · BIG-IP | High8.7 |
| CVE-2026-32682 | NGINX Gateway Fabric vulnerabilityF5 · NGINX Gateway Fabric | High7.1 |
| CVE-2026-50107 | NGINX Gateway Fabric vulnerabilityF5 · NGINX Gateway Fabric | High8.6 |
| CVE-2026-11311 | NGINX Gateway Fabric vulnerabilityF5 · NGINX Gateway Fabric | High8.6 |
| CVE-2026-48142 | NGINX ngx_http_charset_module vulnerabilityF5 · NGINX Open Source | Medium6.3 |
| CVE-2026-42055 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerabilityF5 · NGINX Open Source | Critical9.2 |
| CVE-2026-42530 | NGINX Open-Source ngx_http_v3_module vulnerabilityF5 · NGINX Open Source | Critical9.2 |
| CVE-2026-9256 | NGINX ngx_http_rewrite_module vulnerabilityF5 · NGINX Plus | Critical9.2 |
| CVE-2026-8711 | NGINX JavaScript vulnerabilityF5 · NGINX JavaScript | Critical9.2 |
| CVE-2026-42926 | NGINX ngx_http_proxy_v2_module vulnerabilityF5 · NGINX Open Source | Medium6.3 |
| CVE-2026-40460 | NGINX ngx_quic_module vulnerabilityF5 · NGINX Plus | Medium6.9 |
| CVE-2026-42946 | NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerabilityF5 · NGINX Plus | High8.3 |
| CVE-2026-42934 | NGINX ngx_http_charset_module vulnerabilityF5 · NGINX Plus | Medium6.3 |
| CVE-2026-42945 | NGINX ngx_http_rewrite_module vulnerabilityF5 · NGINX Plus | Critical9.2 |
| CVE-2026-40701 | NGINX ngx_http_ssl_module vulnerabilityF5 · NGINX Plus | Medium6.3 |
| CVE-2026-40423 | BIG-IP SIP profile vulnerabilityF5 · BIG-IP | High8.7 |
| CVE-2026-42930 | Appliance mode iControl REST vulnerabilityF5 · BIG-IP | High8.5 |
| CVE-2026-24464 | Appliance mode iControl REST vulnerabilityF5 · BIG-IP | Medium6.9 |
| CVE-2026-39458 | BIG-IP DNS Cache vulnerabilityF5 · BIG-IP | High8.7 |
| CVE-2026-41959 | iControl and tmsh REST vulnerabilityF5 · BIG-IP | High7.1 |
| CVE-2026-42406 | BIG-IP and BIG-IQ privilege escalation vulnerabilityF5 · BIG-IP | High8.5 |
| CVE-2026-42058 | BIG-IP iControl REST vulnerabilityF5 · BIG-IP | Medium5.3 |
| CVE-2026-32643 | BIG-IP and BIG-IQ privilege escalation vulnerabilityF5 · BIG-IP | High8.5 |