Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,215All CVEsplus 18,875 rejected
- 806Last 24 hours3,103 in the last 7 days
- 17,397Last 30 days1,564 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 13 | 6 | 0 | 0 | 21 | 225 |
| 2025 | 9 | 35 | 23 | 1 | 0 | 68 | 204 |
| 2024 | 12 | 19 | 5 | 0 | 0 | 36 | 136 |
| 2023 | 1 | 9 | 8 | 1 | 0 | 19 | 100 |
| 2022 | 1 | 12 | 5 | 0 | 0 | 18 | 81 |
| 2021 | 2 | 2 | 3 | 0 | 0 | 7 | 63 |
| 2020 | 10 | 17 | 18 | 2 | 0 | 47 | 56 |
| 2019 | 0 | 2 | 4 | 1 | 0 | 7 | 9 |
| 2018 | 0 | 2 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-13599 | ABB Ability Edgenius | Missing Authentication in Edgenius AuthDBABB · Ability Edgenius | Medium5.8 |
| CVE-2026-17525 | My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversionABB · My Control System | Medium5.1 |
| CVE-2026-15953 | Path Traversal During Project Archive ImportABB · Protection and control IED manager (PCM600) | Medium5.6 |
| CVE-2026-15952 | Improper Permission Assignment in Scheduler ServiceABB · Protection and control IED manager (PCM600) | High7.1 |
| CVE-2026-19438 | Mint Workbench I Path traversal VulnerabilityABB · Mint Workbench I | High8.2 |
| CVE-2023-5778 | Missing Length CheckABB · Freelance Controller DCP | Critical9.2 |
| CVE-2026-12705 | Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update ToolABB · KNX Update Tool (ABB) | Medium5.9 |
| CVE-2025-13162 | Advant Master Online Builder DLL vulnerabilityABB · Control Builder A | Medium4.1 |
| CVE-2025-7064 | Freelance Security Lock – Access to Windows OSABB · Freelance | Medium5.6 |
| CVE-2025-14774 | Communication analysis between the Card Reader and TP2CardReaderService daemonABB · T-MAC Plus | High7.2 |
| CVE-2025-14773 | Stored Cross-Site Scripting in ABB T-MAC Plus web applicationABB · T-MAC Plus | High7.2 |
| CVE-2025-14772 | Broken Access Control in ABB T-MAC Plus web applicationABB · T-MAC Plus | High7.3 |
| CVE-2025-14771 | File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web SiteABB · T-MAC Plus | High7.3 |
| CVE-2025-3756 | Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850ABB · AC800M (System 800xA) | High7.1 |
| CVE-2025-13779 | Configuration Data SpillABB · AWIN GW100 rev.2 | High7.2 |
| CVE-2025-13778 | Device Reboot ControlABB · AWIN GW100 rev.2 | High7.1 |
| CVE-2025-13777 | Authentication Bypass due to Improper Session ValidationABB · AWIN GW100 rev.2 | High7.2 |
| CVE-2025-14510 | ABB Ability OPTIMAX Authentication Bypass in Single-Sign OnABB · ABB Ability OPTIMAX | Critical9.2 |
| CVE-2025-4677 | Idle session timeout is not configured for multiple open portsABB · WebPro SNMP Card PowerValue | High7.1 |
| CVE-2025-4676 | Authentication bypass by brute forcing Authentication HeadersABB · WebPro SNMP Card PowerValue | High8.4 |
| CVE-2025-4675 | Improper implementation of Modbus protocol leading to DOS attackABB · WebPro SNMP Card PowerValue | High7.1 |
| CVE-2025-12143 | Stack Memory Corruption VulnerabilityABB · Terra AC wallbox | Medium6.9 |
| CVE-2025-10571 | ABB Ability Edgenius Authentication BypassABB · ABB Ability Edgenius | Critical9.4 |
| CVE-2025-12142 | BSS(Block Started by Symbol) Memory Corruption VulnerabilityABB · Terra AC wallbox | Medium6.9 |
| CVE-2025-5517 | Heap Memory Corruption VulnerabilityABB · Terra AC wallbox (UL40/80A) | Medium6.1 |
| CVE-2025-3465 | Path Traversal VulnerabilityABB · CoreSense™ HM | High8.2 |
| CVE-2025-9574 | Missing Authentication VulnerabilityABB · ALS-mini-s4 IP | Critical9.9 |
| CVE-2025-9970 | Application credential stored in clear text in memoryABB · MConfig | Medium5.7 |
| CVE-2021-22291 | EIBPORT Reflected XSSABB · EIBPORT V3 KNX | High8.5 |
| CVE-2025-10504 | Heap Memory Corruption VulnerabilityABB · Terra AC wallbox | Medium6.9 |
| CVE-2025-10207 | Authenticated File Disclosure/DeleteABB · FLXEON | High7.5 |
| CVE-2024-48851 | Remote Code ExecutionABB · FLXEON | High7.5 |
| CVE-2025-10205 | Predictable Salt and Weak Hashing AlgorithmABB · FLXEON | High8.7 |
| CVE-2024-48842 | Hardcoded passwordsABB · FLXEON | High7.3 |
| CVE-2025-8754 | ABB AbilityTM zenon Remote Transport VulnerabilityABB · ABB AbilityTM zenon | High8.7 |
| CVE-2025-7679 | Session ID Basic Auth BypassABB · Aspect | Critical9.2 |
| CVE-2025-7677 | DOS attack possibleABB · Aspect | High8.2 |
| CVE-2025-53187 | Unauthenticated RCEABB · ASPECT | Critical9.3 |
| CVE-2025-7745 | Modbus TCP buffer overreadABB · AC500 V2 | Medium6.9 |
| CVE-2025-7705 | Authentication bypass due to compatibility mode enabled by defaultABB · Switch Actuator 4 DU-83330 | High8.6 |
| CVE-2025-6071 | Hard Coded Key used for AES encryptionABB · RMC-100 | Medium6.3 |
| CVE-2025-6072 | Stack Buffer Overflow in MQTTCoreABB · RMC-100 | High8.2 |
| CVE-2025-6073 | Stack Buffer Overflow in MQTTCoreABB · RMC-100 | High8.2 |
| CVE-2025-6074 | Authentication Bypass to the MQTT configuration Web InterfaceABB · RMC-100 | Medium6.3 |
| CVE-2025-4407 | Application does not invalidate session after password resetABB · Lite Panel Pro | Medium6.8 |
| CVE-2024-13967 | ession-Management FailureABB · EIBPORT V3 KNX | Critical9.4 |
| CVE-2024-13945 | Stored Absolute Path TraversalABB · ASPECT-Enterprise | High8.4 |
| CVE-2024-51552 | Weak Password StorageABB · ASPECT-Enterprise | High7.1 |
| CVE-2024-13958 | Stored Cross Site ScriptingABB · ASPECT-Enterprise | Medium4.6 |
| CVE-2024-13957 | SSRF Server Side Request ForgeryABB · ASPECT-Enterprise | High7.0 |