Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,298All CVEsplus 19,140 rejected
- 452Last 24 hours2,722 in the last 7 days
- 16,914Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 8 | 7 | 0 | 0 | 16 | 16 |
| Title | ||
|---|---|---|
| CVE-2026-121453 | SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpointdataease · SQLBot | Medium5.1 |
| CVE-2026-93660 | SQLBot through 1.10.1 Improper Access Control via Dashboard Updatedataease · SQLBot | High7.1 |
| CVE-2026-53557 | SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Executiondataease · SQLBot | High7.7 |
| CVE-2026-53555 | Stored XSS via SVG Uploaddataease · SQLBot | Medium5.1 |
| CVE-2026-53556 | SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Readdataease · SQLBot | Medium6.0 |
| CVE-2026-53554 | SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processingdataease · SQLBot | High7.3 |
| CVE-2026-72743 | SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-htmldataease · SQLBot | Medium5.1 |
| CVE-2026-42463 | SQLBot: Unauthorized Access Vulnerabilitydataease · SQLBot | High8.6 |
| CVE-2026-33324 | SQLBot prompt injection allows arbitrary SQL execution and remote code executiondataease · SQLBot | Critical9.4 |
| CVE-2026-5417 | Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgeryDataease · SQLbot | Medium5.1 |
| CVE-2026-32950 | SQLBot: RCE via SQL Injection in Excel Upload Endpointdataease · SQLBot | High8.6 |
| CVE-2026-32949 | SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQLdataease · SQLBot | High8.7 |
| CVE-2026-32622 | SQLBot: Remote Code Execution via Terminology Poisoningdataease · SQLBot | High8.6 |
| CVE-2025-15598 | Dataease SQLBot JWT Token auth.py validateEmbedded signature verificationDataease · SQLBot | Medium6.3 |
| CVE-2025-15597 | Dataease SQLBot API Endpoint assistant.py access controlDataease · SQLBot | Medium5.3 |
| CVE-2025-69285 | SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerabilitydataease · SQLBot | High7.7 |