Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,807All CVEsplus 19,141 rejected
- 474Last 24 hours3,085 in the last 7 days
- 16,917Last 30 days1,578 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 10 | 11 | 41 | 7 | 1 | 70 | 104 |
| 2025 | 2 | 1 | 8 | 3 | 0 | 14 | 34 |
| 2024 | 1 | 3 | 8 | 2 | 0 | 14 | 20 |
| 2023 | 0 | 0 | 1 | 1 | 0 | 2 | 6 |
| 2022 | 1 | 1 | 0 | 0 | 0 | 2 | 4 |
| 2021 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-123339 | Symfony: Inline Fragments Let Untrusted Forwarded Headers Set the Host, Scheme and Port of the URLs Generated for the Main Requestsensiolabs · symfony | Low2.3 |
| CVE-2026-77463 | Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deploymentumputun · remark42 | Medium6.5 |
| CVE-2026-86041 | ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` headerPublic exploitmayswind · ezbookkeeping | Medium5.3 |
| CVE-2026-120633 | CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_portCGI | Not scored |
| CVE-2026-119711 | PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For HeaderPublic exploitpipeshub-ai · pipeshub-ai | Medium6.9 |
| CVE-2026-118265 | Echo: X-Real-IP extractor trusts the header value instead of the sending peerlabstack · echo | Medium5.3 |
| CVE-2026-112378 | Use of Less Trusted Source in GitLabGitLab · GitLab | Medium4.3 |
| CVE-2026-114474 | Use of Less Trusted Source in hMailServerProgressive Robot Ltd · hMailServer | Medium5.9 |
| CVE-2026-114437 | Chi Client IP Spoofing in ClientIPFromXFF via X-Forwarded-ForPublic exploitgo-chi · chi | Medium6.3 |
| CVE-2026-107567 | Use of Less Trusted Source in hMailServerProgressive Robot Ltd · hMailServer | High7.5 |
| CVE-2026-111934 | Coder before 2.34.7 IP Spoofing via X-Forwarded-For Headercoder · coder | Medium6.3 |
| CVE-2026-111450 | Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit…Wheels · Wheels | Medium5.9 |
| CVE-2026-111443 | Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an…Wheels · Wheels | Medium6.5 |
| CVE-2026-110726 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element…Eclipse Foundation · Eclipse Connected Services Platform | Medium6.5 |
| CVE-2026-93483 | In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a…Znuny · Znuny | Critical9.5 |
| CVE-2026-108736 | Speedtest Tracker through 1.15.0 IP Allowlist Bypass via X-Forwarded-For Spoofingalexjustesen · speedtest-tracker | Medium6.3 |
| CVE-2026-108555 | PairDrop through 1.11.2 IP Spoofing via cf-connecting-ip Headerschlagmichdoch · PairDrop | Low2.3 |
| CVE-2026-108162 | Pingvin Share X before 1.22.0 Rate Limit Bypass via Spoofed X-Forwarded-Forsmp46 · pingvin-share-x | Medium6.9 |
| CVE-2026-78015 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated…Dell · Secure Connect Gateway (SCG) Policy Manager | Low3.7 |
| CVE-2026-107271 | Gophish through 0.12.1 Login Rate Limit Bypass via X-Forwarded-For SpoofingPublic exploitgophish · gophish | Medium6.9 |
| CVE-2026-105051 | Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on…Irdeto · Denuvo Anti-Tamper | Low1.9 |
| CVE-2026-103592 | simple-php-router through 5.4.1.7 IP restriction bypass via forwarding headerspecee · simple-router | Medium6.9 |
| CVE-2026-102630 | UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Hostunopim · unopim | Low2.3 |
| CVE-2026-101277 | Trusted Domain Project OpenDKIM Tag Tokenizer dkim.c dkim_process_set less trusted sourcePublic exploitTrusted Domain Project · OpenDKIM | Medium6.9 |
| CVE-2026-102275 | PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusionPublic exploitjpadilla · pyjwt | Medium6.5 |
| CVE-2026-100653 | vLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin PropagationPublic exploitvllm-project · vllm | High8.3 |
| CVE-2026-80514 | wpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit BypassPublic exploitUnknown · wpForo Forum | Medium5.3 |
| CVE-2026-97404 | In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an…OpenStack · Zaqar | Critical9.2 |
| CVE-2026-92530 | Use of Less Trusted Source in GitLabGitLab · GitLab | Medium4.3 |
| CVE-2026-84718 | Automation-controller: automation-controller: client ip spoofing in audit/access logs via unrestricted x-forwarded-for trustRed Hat · Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Medium4.3 |
| CVE-2026-87070 | Forminator Forms < 1.57.2.1 - Unauthenticated Poll Vote Limit Bypass via IP SpoofingPublic exploitUnknown · Forminator Forms | Medium5.3 |
| CVE-2026-62987 | Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection headerPublic exploitfabiolb · fabio | Medium5.8 |
| CVE-2026-61682 | kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspacekcp-dev · kcp | Critical9.9 |
| CVE-2026-61589 | djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live pathdjust-org · djust | Medium6.3 |
| CVE-2026-92395 | @fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet@fastify/proxy-addr · @fastify/proxy-addr | Critical9.1 |
| CVE-2026-90711 | proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnetproxy-addr · proxy-addr | Critical9.1 |
| CVE-2026-90679 | Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account…Forgejo · Forgejo | Medium4.3 |
| CVE-2026-16272 | Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS ModulePayTR Payment and Electronic Money Institution Inc. · PayTR Virtual Pos iFrame API WHMCS Module | Critical9.1 |
| CVE-2026-16732 | fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-countfastify · fastify | Medium6.1 |
| CVE-2026-25552 | Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For HeaderTryGhost · Ghost-CLI | Medium6.3 |
| CVE-2026-63220 | CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()codeigniter4 · CodeIgniter4 | Medium4.8 |
| CVE-2026-50243 | 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAILNLnet Labs · Unbound | Medium6.3 |
| CVE-2026-63770 | Glance 0.8.5 IP Spoofing Authentication Brute-Force Protection BypassPublic exploitglanceapp · glance | High8.2 |
| CVE-2026-64619 | FileCodeBox < 2.4 Anti-bruteforce Rate Limit Bypass via Spoofed Headersvastsa · FileCodeBox | High8.7 |
| CVE-2026-46415 | Caddy Defender trusted proxy client IP bypassJasonLovesDoggo · caddy-defender | High8.2 |
| CVE-2026-9561 | Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the authoritative source of the client IP address in audit log…Eclipse Foundation · Eclipse Kura | High8.8 |
| CVE-2026-55641 | 9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRFPublic exploitdecolua · 9router | High8.2 |
| CVE-2026-58122 | Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofingnesquena · hermes-webui | Critical9.3 |
| CVE-2026-59897 | Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplicationhonojs · hono | Medium4.8 |
| CVE-2026-59999 | In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.OpenBSD · OpenSSH | Medium5.9 |