Skip to content
CVE Tracker

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,247All CVEsplus 18,875 rejected
  • 799Last 24 hours3,084 in the last 7 days
  • 17,422Last 30 days1,573 of them critical
  • 1,767Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260026088

Latest CVEs

8 CVEs, newest first

CVEs, newest first
Title
CVE-2026-59301
Potential for logging sensitive data in Spring Cloud Function AzureSpring · Spring Cloud Function
Low3.1
CVE-2026-59300
Potential for logging sensitive data in Spring Cloud Function AWSSpring · Spring Cloud Function
Low3.1
CVE-2026-59299
Composition lookup can potentially poison base function in Spring Cloud FunctionSpring · Spring Cloud Function
Low3.1
CVE-2026-59298
Potential for improper filtering of HTTP headers in Spring Cloud FunctionSpring · Spring Cloud Function
Low3.1
CVE-2026-59297
Spring Cloud Function can incorrectly determine if URI is secureSpring · Spring Cloud Function
Low3.1
CVE-2026-59291
Potential arbitrary file read and SSRF vulnerability in Spring Cloud FunctionSpring · Spring Cloud Function
Low2.0
CVE-2026-40990
Unbounded cache for function definitionsSpring · Spring Cloud Function
Medium5.7
CVE-2026-40989
Self Routing guard bypassed via function compositionSpring · Spring Cloud Function
Medium5.7