Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,807All CVEsplus 19,141 rejected
- 475Last 24 hours3,085 in the last 7 days
- 16,917Last 30 days1,578 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 57 | 48 | 18 | 3 | 0 | 126 | 224 |
| 2025 | 13 | 13 | 5 | 2 | 0 | 33 | 98 |
| 2024 | 13 | 16 | 2 | 0 | 0 | 31 | 65 |
| 2023 | 18 | 3 | 1 | 0 | 0 | 22 | 34 |
| 2022 | 5 | 0 | 1 | 0 | 0 | 6 | 12 |
| 2021 | 0 | 1 | 1 | 0 | 0 | 2 | 6 |
| 2020 | 0 | 3 | 1 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-120859 | PyMoDAQ before 5.3.10 Arbitrary Code Execution via Crafted HDF5, Dock Layout, and XML Settings FilesPyMoDAQ · PyMoDAQ | High8.5 |
| CVE-2026-120499 | h5io before 0.2.6 Arbitrary Code Execution via read_hdf5Public exploith5io · h5io | High8.5 |
| CVE-2026-114424 | Code execution through double evaluation in address replacement rulesSEPPmail AG · SEPPmail Secure Email Gateway (SEG) | Critical9.2 |
| CVE-2026-44344 | Chamilo LMS: Conditional PHP execution through vendored QuickForm evalchamilo · chamilo-lms | Medium6.6 |
| CVE-2026-115943 | Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmtSpreadsheet-XLSX | Critical9.8 |
| CVE-2026-119121 | Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_forunclecode · crawl4ai | Medium5.3 |
| CVE-2026-90872 | Server-Side Script Injection in Manager Web UI in Progress WS_FTP ServerProgress Software · WS_FTP Server | Medium6.6 |
| CVE-2026-44179 | XWiki Pro Macros: excerpt-include title and content injection executes codePublic exploitxwikisas · xwiki-pro-macros | Critical9.9 |
| CVE-2026-78497 | JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string evalJQ-Lite | High8.4 |
| CVE-2026-111865 | THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injectionPublic exploitTHU-MIG · yoloe | Medium4.8 |
| CVE-2026-111687 | WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss EndpointPublic exploitrachelos · we-mp-rss | Critical9.3 |
| CVE-2026-111391 | SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper FilterPublic exploitsgl-project · sglang | Critical9.2 |
| CVE-2026-111237 | Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injectionUltralytics · FastSAM | Medium4.8 |
| CVE-2026-111212 | ImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injectionPublic exploitImprintLab · Medical-SAM-Adapter | Low2.4 |
| CVE-2026-86002 | Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGSdokku · dokku | Critical9.0 |
| CVE-2026-65141 | NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code…NVIDIA · Isaac Lab | High7.8 |
| CVE-2026-63350 | Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized…Siemens · SIMATIC Drive Controller CPU 1504D TF | Critical9.4 |
| CVE-2026-65954 | PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()PHPCSStandards · PHPCSUtils | High8.6 |
| CVE-2026-108263 | Astron Agent: Unsandboxed code-node leads to cross-tenant RCEiflytek · astron-agent | Critical9.9 |
| CVE-2026-85486 | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form,…Brocade · Brocade Active Support Connectivity Gateway | High8.6 |
| CVE-2026-105315 | django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injectionPublic exploitdjango-haystack | Medium5.1 |
| CVE-2026-55094 | Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`)taskcluster · taskcluster | High8.7 |
| CVE-2026-69662 | Toptech TMS7 and TopHAT Eval InjectionToptech Systems · TMS7 | Low2.1 |
| CVE-2024-42002 | Unsafe use of eval() method in ros2 topic hz toolOpen Source Robotics Foundation · Robot Operating System 2 (ROS 2) | High8.6 |
| CVE-2026-101861 | Langflow Code Execution via eval() in Component Input Schemalangflow-ai · langflow | Low2.1 |
| CVE-2026-100741 | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServerProgressive Robot Ltd · hMailServer | Critical9.8 |
| CVE-2026-100842 | MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute ChainsPublic exploitProject-MONAI · MONAI | High7.3 |
| CVE-2026-100840 | MONAI through 1.6.0 Remote Code Execution via bundle configurationPublic exploitProject-MONAI · MONAI | High8.5 |
| CVE-2026-57149 | plone.app.portlets Vulnerable to Remote Code Execution via TALES Injectionplone · plone.app.portlets | Critical9.9 |
| CVE-2026-76974 | Information Disclosure vulnerability in SAP Fiori LaunchpadSAP_SE · SAP Fiori Launchpad | Medium5.3 |
| CVE-2026-78847 | An issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib/engines.js using eval() to parse front matter when language is…Public exploit | Critical9.8 |
| CVE-2025-53837 | org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issuexwiki · xwiki-rendering | Critical9.9 |
| CVE-2026-63325 | Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`Redocly · redocly-cli | High7.8 |
| CVE-2026-61667 | DIRAC: RCE in FileCatalog DatasetManager via SQL injection + evalDIRACGrid · DIRAC | Critical9.9 |
| CVE-2026-45579 | DIRAC: RCE in RequestManager due to eval on untrusted inputDIRACGrid · DIRAC | Critical9.9 |
| CVE-2026-19780 | Koha Eval Code Injection Remote Code Execution VulnerabilityKoha · Koha | High8.8 |
| CVE-2026-82789 | An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). If exploited, arbitrary…Contec · CONPROSYS HMI System(CHS) | High8.7 |
| CVE-2026-80351 | Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator podApache Software Foundation · Apache Camel K | Critical9.8 |
| CVE-2026-78550 | Improper Input Handling in Okta Access Gateway Management Console Exception HandlerOkta · Okta Access Gateway | Medium6.6 |
| CVE-2026-48273 | ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)Adobe · ColdFusion 2025 | Critical9.9 |
| CVE-2026-76190 | ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)Adobe · ColdFusion 2025 | High8.6 |
| CVE-2026-79678 | Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of serviceRed Hat · Red Hat Enterprise Linux 10 | High8.1 |
| CVE-2026-85165 | n8n before 2.36.2 Expression Sandbox Bypass via SpreadElementn8n-io · n8n | High7.2 |
| CVE-2026-65643 | Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.Public exploitWebPros · cPanel | High8.7 |
| CVE-2026-19295 | Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcementIBM · Langflow OSS | Critical9.9 |
| CVE-2026-54569 | SENAITE.CORE: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') and Missing Authorization in senaite.corePublic exploitsenaite · senaite.core | Critical9.8 |
| CVE-2026-75062 | Eval Injection in google/langfun via default lf.query protocolPublic exploitGoogle · langfun | Critical9.2 |
| CVE-2026-78136 | chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.chirpmyradio · CHIRP | High7.8 |
| CVE-2026-61539 | Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsingxorbitsai · inference | Critical10.0 |
| CVE-2026-77810 | Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune ConnectorAWS · Athena Federated Query Neptune Connector | Critical9.4 |