Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 442Last 24 hours2,720 in the last 7 days
- 16,919Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 20 | 13 | 1 | 0 | 36 | 36 |
| Title | ||
|---|---|---|
| CVE-2026-102107 | Kiteworks Core user impersonation in a file-request featureKiteworks · Core | Medium4.6 |
| CVE-2026-102110 | Missing authentication on a Kiteworks appliance setup functionKiteworks · Core | Medium5.9 |
| CVE-2026-102111 | Kiteworks Core Improper Validation of Specified Quantity in InputKiteworks · Core | Medium4.9 |
| CVE-2026-102112 | Kiteworks Core Local Privilege EscalationKiteworks · Core | High7.8 |
| CVE-2026-102113 | Kiteworks Core Local Privilege EscalationKiteworks · Core | High7.8 |
| CVE-2026-102114 | Kiteworks Core OS Command InjectionKiteworks · Core | High7.2 |
| CVE-2026-102115 | Kiteworks Core Authentication Bypass in the Password Reset WorkflowKiteworks · Core | Critical9.8 |
| CVE-2026-102117 | Kiteworks Core Remote Code ExecutionKiteworks · Core | High7.2 |
| CVE-2026-102118 | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege EscalationKiteworks · Core | High7.8 |
| CVE-2026-102120 | Kiteworks Core OS Command InjectionKiteworks · Core | High8.8 |
| CVE-2026-102122 | Kiteworks Core Incorrect AuthorizationKiteworks · Core | Medium4.3 |
| CVE-2026-102123 | Kiteworks Core Path TraversalKiteworks · Core | High7.4 |
| CVE-2026-102124 | Kiteworks Core Missing Authentication for Critical FunctionKiteworks · Core | Medium6.5 |
| CVE-2026-102125 | Kiteworks Core Sandbox EscapeKiteworks · Core | High8.8 |
| CVE-2026-102126 | Kiteworks Core Stored Cross-site Scripting (XSS)Kiteworks · Core | High8.1 |
| CVE-2026-102129 | Kiteworks Core Incorrect Privilege AssignmentKiteworks · Core | High7.2 |
| CVE-2026-102132 | Kiteworks Core Privilege Escalation through Improper Access ControlKiteworks · Core | High7.2 |
| CVE-2026-102133 | Kiteworks Core Arbitrary File Write through Command InjectionKiteworks · Core | Medium6.6 |
| CVE-2026-102134 | Kiteworks Core Unprotected Alternate ChannelKiteworks · Core | Medium5.4 |
| CVE-2026-102136 | Kiteworks Core Command Execution through Configuration InjectionKiteworks · Core | Medium6.3 |
| CVE-2026-102137 | Kiteworks Core Unrestricted Upload of File with Dangerous TypeKiteworks · Core | Medium4.1 |
| CVE-2026-102138 | Kiteworks Core Server-Side Request Forgery (SSRF)Kiteworks · Core | Low3.3 |
| CVE-2026-102101 | Kiteworks Core deserialization of untrusted dataKiteworks · Core | High8.1 |
| CVE-2026-102140 | Kiteworks Core Insufficient Verification of Data AuthenticityKiteworks · Core | Medium4.9 |
| CVE-2026-102141 | Kiteworks Core Privilege Escalation through External Control of File Name or PathKiteworks · Core | Medium6.7 |
| CVE-2026-102142 | Kiteworks Core Remote Code Execution through Server-Side Template InjectionKiteworks · Core | High7.2 |
| CVE-2026-102100 | Kiteworks Core stored XSSKiteworks · Core | High8.7 |
| CVE-2026-102147 | Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)Kiteworks · Core | Critical9.3 |
| CVE-2026-102145 | Kiteworks Core Server-Side Request Forgery through CRLF InjectionKiteworks · Core | Medium6.6 |
| CVE-2026-102096 | Kiteworks Core OS command injectionKiteworks · Core | High7.2 |
| CVE-2026-102099 | Kiteworks Core arbitrary file writeKiteworks · Core | High7.2 |
| CVE-2026-102093 | Kiteworks Core improper privilege managementKiteworks · Core | High7.2 |
| CVE-2026-102092 | Kiteworks Core stored XSSKiteworks · Core | High8.7 |
| CVE-2026-102090 | Kiteworks Core content injectionKiteworks · Core | Medium4.3 |
| CVE-2026-102098 | Kiteworks Core SQL InjectionKiteworks · Core | High7.2 |
| CVE-2026-23514 | Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Managementkiteworks · core | High8.8 |