Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 400,789All CVEsplus 19,114 rejected
- 481Last 24 hours2,892 in the last 7 days
- 16,905Last 30 days1,556 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 27 | 31 | 118 | 18 | 0 | 194 | 1,584 |
| 2025 | 25 | 35 | 137 | 15 | 0 | 212 | 1,390 |
| 2024 | 5 | 21 | 102 | 13 | 0 | 141 | 1,178 |
| 2023 | 23 | 33 | 99 | 12 | 0 | 167 | 1,037 |
| 2022 | 11 | 70 | 107 | 2 | 0 | 190 | 870 |
| 2021 | 20 | 43 | 129 | 6 | 0 | 198 | 680 |
| 2020 | 26 | 33 | 154 | 5 | 0 | 218 | 482 |
| 2019 | 10 | 42 | 69 | 2 | 0 | 123 | 264 |
| 2018 | 4 | 48 | 74 | 3 | 0 | 129 | 141 |
| 2017 | 1 | 4 | 7 | 0 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2026-89124 | Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)SAP_SE · SAP HANA (Display Product Catalog Based on Customs Declaration) | Medium4.3 |
| CVE-2026-89122 | Open Redirect Vulnerability in SAP NetWeaver Enterprise PortalSAP_SE · SAP NetWeaver Enterprise Portal | Medium6.1 |
| CVE-2026-89121 | Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)SAP_SE · SAP S/4HANA (Linear Asset Management RAP Business Object) | Medium4.7 |
| CVE-2026-89120 | Missing authorization check in SAP ABAP PlatformSAP_SE · SAP ABAP Platform | High7.1 |
| CVE-2026-89118 | Information Disclosure vulnerability in SAP NetWeaver Enterprise PortalSAP_SE · SAP NetWeaver Enterprise Portal | Medium5.3 |
| CVE-2026-89117 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalSAP_SE · SAP NetWeaver Enterprise Portal | Medium6.1 |
| CVE-2026-89116 | OS Command Injection in Yeoman-UI / Application Wizard Extension for VS CodeSAP_SE · SAP yeoman-ui | Medium5.9 |
| CVE-2026-89113 | SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)SAP_SE · SAP Commerce Cloud (OOTB Code) | High8.8 |
| CVE-2026-89112 | Broken Access Control in CLA-Assistant � CLA Signature PII DisclosureSAP_SE · CLA-Assistant | Medium6.5 |
| CVE-2026-89111 | OAuth2 SSRF vulnerability in SAP Cloud SDK for PythonSAP_SE · SAP Cloud | Critical10.0 |
| CVE-2026-89110 | Broken Access Control in SAP NetWeaver Visual ComposerSAP_SE · SAP NetWeaver Visual Composer | Critical9.9 |
| CVE-2026-89108 | Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)SAP_SE · SAP Manufacturing Integration and Intelligence (Configuration Service) | Critical9.1 |
| CVE-2026-89107 | Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)SAP_SE · SAP S/4HANA (Manage Substitution/Validation Rules) | Critical9.9 |
| CVE-2026-89106 | Cross Site Scripting (XSS) vulnerability in SAPUI5SAP_SE · SAPUI5 | Medium4.4 |
| CVE-2026-89105 | Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-librarySAP_SE · SAP/cloud-security-services-integration-library | Medium4.2 |
| CVE-2026-76976 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)SAP_SE · SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) | Medium5.4 |
| CVE-2026-76975 | Cross-Site Scripting (XSS) vulnerability in SAPUI5 (Support Assistant Overlay)SAP_SE · SAPUI5 (Support Assistant Overlay) | Medium6.1 |
| CVE-2026-76972 | Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and IntelligenceSAP_SE · SAP Manufacturing Integration and Intelligence | Medium6.5 |
| CVE-2026-58249 | Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)SAP_SE · SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager) | High7.5 |
| CVE-2026-58242 | Improper Authorization check in SAP Cloud ConnectorSAP_SE · SAP Cloud Connector | Low3.5 |
| CVE-2026-76974 | Information Disclosure vulnerability in SAP Fiori LaunchpadSAP_SE · SAP Fiori Launchpad | Medium5.3 |
| CVE-2026-76977 | Clickjacking vulnerability in SAPUI5(Frame Options Allowlist)SAP_SE · SAPUI5(Frame Options Allowlist) | Medium4.3 |
| CVE-2026-76971 | Server-Side Request Forgery in SAP Manufacturing Integration and IntelligenceSAP_SE · SAP Manufacturing Integration and Intelligence | Medium6.5 |
| CVE-2026-76969 | Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)SAP_SE · SAP Cloud Application Programming Model (CAP) | Critical9.4 |
| CVE-2026-76968 | Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content ServerSAP_SE · SAP Web Dispatcher, Internet Communication Manager and SAP Content Server | Medium6.5 |
| CVE-2026-76967 | Insecure Deserialization in SAP NetWeaver Business ClientSAP_SE · SAP NetWeaver Business Client | High7.8 |
| CVE-2026-76963 | Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP PlatformSAP_SE · SAP NetWeaver and ABAP Platform | Medium4.3 |
| CVE-2026-76962 | Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)SAP_SE · SAP S/4HANA (Manage Bank Chains app) | Medium4.3 |
| CVE-2026-76961 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)SAP_SE · SAP S/4HANA (Finance for Advanced Payment Management) | Low3.5 |
| CVE-2026-76960 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)SAP_SE · SAP S/4HANA (Finance for Advanced Payment Management) | Low3.5 |
| CVE-2026-76959 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)SAP_SE · SAP S/4HANA (Finance for Advanced Payment Management) | Medium4.6 |
| CVE-2026-76958 | XML External Entity (XXE) Vulnerability in SAP Integration SuiteSAP_SE · SAP Integration Suite | High8.5 |
| CVE-2026-66768 | Improper Access Control in SAP NetWeaver (SAP GUI for Java)SAP_SE · SAP NetWeaver (SAP GUI for Java) | Critical9.0 |
| CVE-2026-66767 | Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformSAP_SE · SAP NetWeaver Application Server for ABAP and ABAP Platform | High7.7 |
| CVE-2026-58240 | Missing Authentication check in SAP NetWeaver (Message Server)SAP_SE · SAP NetWeaver (Message Server) | Critical9.8 |
| CVE-2026-58234 | Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)SAP_SE · SAP Process Integration (SOAP Adapter) | Low2.2 |
| CVE-2026-44766 | SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation)SAP_SE · SAP S/4HANA (Intercompany Matching and Reconciliation) | Medium6.5 |
| CVE-2026-44756 | Memory Corruption vulnerability in SAP Extended Passport (EPP) ProcessingSAP_SE · SAP Extended Passport (EPP) Processing | Critical10.0 |
| CVE-2026-66766 | Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)SAP_SE · SAP S/4HANA (Manage Supply Protection) | High7.5 |
| CVE-2026-58231 | Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)SAP_SE · SAP Commerce Cloud (Data Hub Adapter) | Critical10.0 |
| CVE-2026-66779 | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAPSAP_SE · SAP NetWeaver Application Server ABAP | Medium6.3 |
| CVE-2026-66778 | Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE · SAP Business AI Platform (Approuter) | Medium5.3 |
| CVE-2026-66777 | Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE · SAP Business AI Platform (Approuter) | Medium5.9 |
| CVE-2026-66776 | Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE · SAP Business AI Platform (Approuter) | Medium5.9 |
| CVE-2026-66775 | Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE · SAP Business AI Platform (Approuter) | Medium4.3 |
| CVE-2026-66774 | Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE · SAP Business AI Platform (Approuter) | Low3.7 |
| CVE-2026-66773 | Server-controlled `__next` URL is not checking cross-originSAP_SE · Odata | Medium5.9 |
| CVE-2026-66772 | Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools)SAP_SE · SAP BusinessObjects Business Intelligence Platform (Admin Tools) | Medium4.3 |
| CVE-2026-66771 | Cross Site Scripting (XSS) vulnerability in SAPUI5SAP_SE · SAPUI5 | Medium6.1 |
| CVE-2026-66770 | SQL Injection vulnerability in SAP Social IntelligenceSAP_SE · SAP Social Intelligence | Medium6.3 |