Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,357All CVEsplus 18,889 rejected
- 396Last 24 hours2,987 in the last 7 days
- 17,350Last 30 days1,586 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 23 | 36 | 29 | 0 | 92 | 120 |
| 2025 | 2 | 1 | 3 | 9 | 0 | 15 | 28 |
| 2024 | 2 | 1 | 9 | 0 | 0 | 12 | 13 |
| 2023 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-84897 | wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusionwolfSSL Inc. · wolfSSH | Medium6.9 |
| CVE-2026-83742 | wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platformswolfSSL Inc. · wolfSSH | Medium5.3 |
| CVE-2026-83540 | wolfSSHd on Windows race condition leading to logon token reused across connectionswolfSSL · wolfSSH | High7.7 |
| CVE-2026-81535 | wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization checkwolfSSL Inc. · wolfSSH | Medium6.3 |
| CVE-2026-16516 | wolfSSH ECDSA host key curve not validated against negotiated algorithmwolfSSL Inc. · wolfSSH | Critical9.0 |
| CVE-2026-15442 | Heap use-after-free on read during bidirectional (D)TLS shutdownwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-89102 | OCSP stapling v2 multi accepts non-CA chain certificates as issuerswolfSSL · wolfSSL | High8.3 |
| CVE-2026-89133 | NameConstraints not enforced across unconstrained intermediate CAwolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-89134 | Subject CN name-constraint check bypassed when non-DNS SAN presentwolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-89135 | Failed X509_verify_cert leaves unverified CA in shared CertManagerwolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-89136 | Client accepts unsolicited RawPublicKey server certificate typewolfSSL · wolfSSL | High8.3 |
| CVE-2026-93302 | Trusted peer certificate match ignores public key, allowing forged CA cloneswolfSSL · wolfSSL | High8.3 |
| CVE-2026-93304 | (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchangewolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-94417 | CRL check skipped when OCSP enabled and certificate has no OCSP URLwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-94418 | Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFYwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-94419 | Client session cache reference poisoning allows resumption with wrong serverwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-81341 | wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 recordswolfSSL Inc. · wolfEngine | Medium6.5 |
| CVE-2026-81020 | wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 recordwolfSSL Inc. · wolfEngine | High7.4 |
| CVE-2026-81019 | wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 recordwolfSSL Inc. · wolfProvider | High7.4 |
| CVE-2026-7511 | PKCS7_verify signer confusion allows forged signatures to be acceptedwolfSSL · wolfSSL | Medium5.9 |
| CVE-2026-7532 | iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefinedwolfSSL · wolfSSL | Medium5.7 |
| CVE-2026-8720 | HMAC-BLAKE2 final discards message when key length exceeds block sizewolfSSL · wolfSSL | Medium5.9 |
| CVE-2026-10098 | OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_statuswolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-11703 | Missing SNI/ALPN binding on stateful (session-ID) TLS session resumptionwolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-55962 | TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerifywolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-6092 | Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configuredwolfSSL · wolfSSL | Low2.1 |
| CVE-2026-6325 | Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms listwolfSSL · wolfSSL | Low2.0 |
| CVE-2026-6329 | PKCS#12 MAC verification uses attacker-controlled comparison lengthwolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-6330 | ML-KEM ARM64 NEON ciphertext comparison only compares half of the inputwolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-6331 | HMAC zero-length tag forgery in EVP_DigestVerifyFinalwolfSSL · wolfSSL | Low2.1 |
| CVE-2026-6412 | Continued acceptance of SHA-1/MD5 digests in certificate processingwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-6450 | CRL critical extension bypass in ParseCRL_ExtensionswolfSSL · wolfSSL | Low1.0 |
| CVE-2026-6678 | Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient InfowolfSSL · wolfSSL | Low1.0 |
| CVE-2026-6679 | DTLS 1.3 ACK serialization heap buffer overflow via integer truncationwolfSSL · wolfSSL | High8.8 |
| CVE-2026-6681 | PKCS#7 decode ignores caller output buffer size, writing past buffer boundswolfSSL · wolfSSL | Low1.0 |
| CVE-2026-6731 | X.509 name constraint bypass via Subject CN treated as a DNS namewolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-7531 | Use-after-free in PQC hybrid key-share handlingwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-10097 | ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recoverywolfSSL · wolfSSL | High8.3 |
| CVE-2026-10512 | X25519 x86_64 assembly final reduction leaves non-canonical field elementwolfSSL · wolfSSL | Low2.3 |
| CVE-2026-10592 | Wildcard DNS SAN bypasses CA name-constraint checkswolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-11310 | X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoringwolfSSL · wolfSSL | High8.7 |
| CVE-2026-12340 | Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computationwolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-55958 | Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessagewolfSSL · wolfSSL | High8.3 |
| CVE-2026-55960 | Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validationwolfSSL · wolfSSL | High8.2 |
| CVE-2026-55964 | Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)wolfSSL · wolfSSL | Medium6.3 |
| CVE-2026-11999 | X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()wolfSSL · wolfSSL | High8.2 |
| CVE-2026-55967 | AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reusewolfSSL · wolfSSL | Low2.0 |
| CVE-2026-55961 | wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signerwolfSSL · wolfSSL | High8.2 |
| CVE-2026-6091 | Partial-chain verification accepts untrusted intermediate as trust anchorwolfSSL · wolfSSL | Medium6.0 |
| CVE-2026-6291 | Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryptionwolfSSL · wolfSSL | Medium6.0 |