Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 399,982All CVEsplus 18,869 rejected
- 683Last 24 hours3,262 in the last 7 days
- 17,348Last 30 days1,523 of them critical
- 1,766Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 29 | 172 | 43 | 1 | 0 | 245 | 1,100 |
| 2025 | 2 | 47 | 45 | 0 | 0 | 94 | 855 |
| 2024 | 3 | 87 | 42 | 0 | 0 | 132 | 761 |
| 2023 | 1 | 43 | 56 | 0 | 0 | 100 | 629 |
| 2022 | 0 | 51 | 44 | 0 | 0 | 95 | 529 |
| 2021 | 5 | 67 | 62 | 0 | 0 | 134 | 434 |
| 2020 | 4 | 41 | 36 | 0 | 0 | 81 | 300 |
| 2019 | 5 | 34 | 34 | 0 | 0 | 73 | 219 |
| 2018 | 10 | 21 | 29 | 0 | 0 | 60 | 146 |
| 2017 | 10 | 45 | 31 | 0 | 0 | 86 | 86 |
| Title | ||
|---|---|---|
| CVE-2026-106079 | Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configurationJuniper Networks · Session Smart Router | High8.8 |
| CVE-2026-103411 | Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsingJuniper Networks · Session Smart Router | High7.1 |
| CVE-2026-103410 | Session Smart Router: Integer overflow causes denial of service during TLS certificate inspectionJuniper Networks · Session Smart Router | High7.5 |
| CVE-2026-103409 | Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessedJuniper Networks · Session Smart Router | Critical9.8 |
| CVE-2026-103408 | Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP optionsJuniper Networks · Session Smart Router | High8.8 |
| CVE-2026-103407 | Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI managementJuniper Networks · Session Smart Router | High8.8 |
| CVE-2026-103406 | Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.Juniper Networks · Session Smart Conductor | Critical9.8 |
| CVE-2026-103405 | Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splittingJuniper Networks · Session Smart Router | Medium5.8 |
| CVE-2026-103404 | Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentialsJuniper Networks · Session Smart Conductor | Medium6.8 |
| CVE-2026-103403 | Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rulesJuniper Networks · Session Smart Router | High8.8 |
| CVE-2026-103402 | Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalationJuniper Networks · Session Smart Router | High8.8 |
| CVE-2026-103401 | Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as rootJuniper Networks · Session Smart Router | High8.8 |
| CVE-2026-103400 | Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanupJuniper Networks · Session Smart Router | Medium5.5 |
| CVE-2026-103394 | Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.Juniper Networks · Session Smart Router | Low3.7 |
| CVE-2026-103393 | Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processingJuniper Networks · Session Smart Router | Medium4.3 |
| CVE-2026-103392 | Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabledJuniper Networks · Session Smart Router | Medium4.8 |
| CVE-2026-103391 | Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy featureJuniper Networks · Session Smart Router | Medium5.3 |
| CVE-2026-103390 | Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identificationJuniper Networks · Session Smart Router | Medium5.3 |
| CVE-2026-101954 | Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabledJuniper Networks · Junos OS | Critical9.3 |
| CVE-2026-101952 | Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabledJuniper Networks · Junos OS | High8.7 |
| CVE-2026-101949 | Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crashJuniper Networks · Junos OS | High8.7 |
| CVE-2026-101964 | Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP messageJuniper Networks · Junos OS | High7.1 |
| CVE-2026-101963 | Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is usedJuniper Networks · Junos OS | High8.7 |
| CVE-2026-101962 | Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is usedJuniper Networks · Junos OS | High8.7 |
| CVE-2026-101961 | Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policyJuniper Networks · Junos OS | High8.7 |
| CVE-2026-101959 | Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crashJuniper Networks · Junos OS | High7.1 |
| CVE-2026-101983 | Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configuredJuniper Networks · Junos OS | Critical9.3 |
| CVE-2026-101982 | Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is usedJuniper Networks · Junos OS | Critical9.3 |
| CVE-2026-101981 | Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabledJuniper Networks · Junos OS | High8.7 |
| CVE-2026-101979 | Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabledJuniper Networks · Junos OS | High8.7 |
| CVE-2026-101976 | Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crashJuniper Networks · Junos OS | High8.7 |
| CVE-2026-101975 | Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is usedJuniper Networks · Junos OS | High7.1 |
| CVE-2026-101972 | Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabledJuniper Networks · Junos OS | High7.1 |
| CVE-2026-102077 | Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stopsJuniper Networks · Junos OS | High8.7 |
| CVE-2026-33798 | Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabledJuniper Networks · Junos OS | High8.7 |
| CVE-2026-33796 | Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabledJuniper Networks · Junos OS | Critical9.3 |
| CVE-2026-33795 | Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertisedJuniper Networks · Junos OS | High8.7 |
| CVE-2026-33792 | Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configuredJuniper Networks · Junos OS | Critical9.3 |
| CVE-2026-33789 | Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of serviceJuniper Networks · Junos OS | Critical9.2 |
| CVE-2026-102185 | Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is usedJuniper Networks · Junos OS | High8.7 |
| CVE-2026-102184 | Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crashJuniper Networks · Junos OS | High8.7 |
| CVE-2026-102183 | Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashesJuniper Networks · Junos OS | High8.7 |
| CVE-2026-102182 | Junos OS: MX Series: Certificate-based IKE packets cause root-level code executionJuniper Networks · Junos OS | Critical9.3 |
| CVE-2026-102180 | Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in useJuniper Networks · Junos OS | High8.7 |
| CVE-2026-102179 | Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is usedJuniper Networks · Junos OS | High8.7 |
| CVE-2026-102178 | Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromiseJuniper Networks · Junos OS | Critical9.3 |
| CVE-2026-102177 | Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is usedJuniper Networks · Junos OS | High7.2 |
| CVE-2026-102176 | Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabledJuniper Networks · Junos OS | High8.7 |
| CVE-2026-102175 | Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is usedJuniper Networks · Junos OS | Critical9.3 |
| CVE-2026-102174 | Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabledJuniper Networks · Junos OS | High8.7 |