Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,676All CVEsplus 19,114 rejected
- 399Last 24 hours2,823 in the last 7 days
- 17,120Last 30 days1,578 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 5 | 9 | 0 | 0 | 14 | 14 |
| Title | ||
|---|---|---|
| CVE-2026-116627 | Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0…Devolutions · PowerShell Universal | High8.7 |
| CVE-2026-92237 | Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an…Devolutions · PowerShell Universal | Medium6.5 |
| CVE-2026-19768 | Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an…Devolutions · PowerShell Universal | High8.1 |
| CVE-2026-16802 | Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file…Devolutions · PowerShell Universal | Medium6.5 |
| CVE-2026-16801 | Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an…Devolutions · PowerShell Universal | High8.8 |
| CVE-2026-16800 | Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an…Devolutions · PowerShell Universal | High8.8 |
| CVE-2026-16799 | Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user…Devolutions · PowerShell Universal | Medium5.0 |
| CVE-2026-16798 | Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated…Devolutions · PowerShell Universal | Medium6.5 |
| CVE-2026-13437 | Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI…Devolutions · PowerShell Universal | Medium6.5 |
| CVE-2026-8694 | Improper access control on the API documentation endpoint in PowerShell UniversalDevolutions · PowerShell Universal | Medium5.3 |
| CVE-2026-3563 | Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to…Devolutions · PowerShell Universal | Medium5.5 |
| CVE-2026-4064 | Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to…Devolutions · PowerShell Universal | High8.3 |
| CVE-2026-3277 | The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the…Devolutions · PowerShell Universal | Medium5.5 |
| CVE-2026-0618 | Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4.5.6, before 5.6.13.Devolutions · PowerShell Universal | Medium6.1 |