Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,293All CVEsplus 19,140 rejected
- 448Last 24 hours2,720 in the last 7 days
- 16,912Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 7 | 10 | 4 | 0 | 23 | 41 |
| 2025 | 0 | 3 | 12 | 1 | 0 | 16 | 18 |
| 2024 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-116769 | Authentication bypass in Secure Access ServersAbsolute Security · Secure Access | Critical9.3 |
| CVE-2026-97718 | CSRF in Secure Access Server v14.60Absolute Security · Secure Access | Critical9.4 |
| CVE-2026-97717 | Denial of Service in Absolute Secure AccessAbsolute Security · Secure Access | Medium6.0 |
| CVE-2026-97716 | Denial of Service in Absolute Secure AccessAbsolute Security · Secure Access | High8.7 |
| CVE-2026-97715 | Denial of Service in Absolute Secure AccessAbsolute Security · Secure Access | High7.1 |
| CVE-2026-97714 | Denial of service vulnerability in Secure AccessAbsolute Security · Secure Access | High8.2 |
| CVE-2026-55402 | CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send…Absolute Security · Secure Access | High8.7 |
| CVE-2026-55401 | CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an…Absolute Security · Secure Access | Medium6.9 |
| CVE-2026-55400 | CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted…Absolute Security · Secure Access | Medium6.0 |
| CVE-2026-55399 | Resource exhaustion vulnerability in the Secure Access publisherAbsolute Security · Secure Access | Medium5.1 |
| CVE-2026-55398 | Memory management vulnerability in Secure Access clientsAbsolute Security · Secure Access | Medium6.9 |
| CVE-2026-33445 | Memory management vulnerability in Secure Access serversAbsolute Security · Secure Access | High8.7 |
| CVE-2026-33443 | Memory management error in Secure Access servers prior to 14.55Absolute Security · Secure Access | High7.1 |
| CVE-2026-40958 | Input validation error in Secure Access clients prior to 14.55Absolute Security · Secure Access | Low2.3 |
| CVE-2026-40957 | Frameable content vulnerability in the Secure Access server login pageAbsolute Security · Secure Access | Medium6.1 |
| CVE-2026-40956 | Memory disclosure in Secure Access ClientsAbsolute Security · Secure Access | Low2.1 |
| CVE-2026-40955 | Integer underflow vulnerability in Secure Access clientsAbsolute Security · Secure Access | Low2.1 |
| CVE-2026-40954 | Integer underflow in Secure Access clients prior to 14.55Absolute Security · Secure Access | Low2.1 |
| CVE-2026-40953 | Heap overflow in Secure Access clientsAbsolute Security · Secure Access | Medium6.7 |
| CVE-2026-40952 | Privilge misconfiguration in Secure Access installersAbsolute Security · Secure Access | High8.5 |
| CVE-2026-0519 | Information Disclosure in Secure Access Between 12.70 and 14.20Absolute Security · Secure Access | Medium4.6 |
| CVE-2026-0518 | XSS in Secure Access Consoles prior to 14.20Absolute Security · Secure Access | Medium4.8 |
| CVE-2026-0517 | Denial of Service in Secure Access Servers Prior to 14.20.Absolute Security · Secure Access | Medium6.0 |
| CVE-2025-59596 | CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local…Absolute Security · Secure Access | Medium6.0 |
| CVE-2025-54089 | Cross-site Scripting vulnerability in Secure Access prior to 14.10Absolute Security · Secure Access | Medium4.6 |
| CVE-2025-54088 | Open Redirect in Secure Access prior to 14.10Absolute Security · Secure Access | Medium5.5 |
| CVE-2025-54087 | Server-side request forgery in Secure AccessAbsolute Security · Secure Access | Low1.8 |
| CVE-2025-54086 | Excess Permissions in WarehouseAbsolute Security · Secure Access | Medium5.3 |
| CVE-2025-49082 | Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56Absolute Security · Secure Access | Medium5.1 |
| CVE-2025-54085 | Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56Absolute Security · Secure Access | Medium5.1 |
| CVE-2025-49083 | Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56Absolute Security · Secure Access | High7.0 |
| CVE-2025-49081 | Input validation vulnerability in the Secure Access prior to version 13.55Absolute Security · Secure Access | Medium6.9 |
| CVE-2025-49080 | Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54Absolute Security · Secure Access | High8.7 |
| CVE-2025-27706 | Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54Absolute Security · Secure Access | Medium4.6 |
| CVE-2025-27703 | Privilege escalation in the management console of Absolute Secure Access prior to version 13.54Absolute Security · Secure Access | High7.0 |
| CVE-2025-27702 | Permissions bypass in the management console of Absolute Secure Access prior to version 13.54Absolute Security · Secure Access | Medium6.9 |
| CVE-2024-6364 | Server Identity Validation Bypass in Absolute Persistence®Absolute Security · Absolute Persistence | Medium6.9 |
| CVE-2025-27705 | There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with…Absolute Security · Secure Access | Medium5.5 |
| CVE-2025-27704 | There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with…Absolute Security · Secure Access | Medium5.5 |
| CVE-2024-40873 | XSS in Secure Access administrative consoleAbsolute Security · Secure Access | Medium4.5 |
| CVE-2024-40872 | Elevation of privilege in Absolute Secure Access clients and serversAbsolute Security · Secure Access | High8.4 |