Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,296All CVEsplus 18,877 rejected
- 670Last 24 hours3,039 in the last 7 days
- 17,432Last 30 days1,580 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 12 | 32 | 8 | 0 | 0 | 52 | 191 |
| 2025 | 4 | 19 | 22 | 1 | 0 | 46 | 139 |
| 2024 | 6 | 18 | 4 | 0 | 0 | 28 | 93 |
| 2023 | 5 | 8 | 1 | 0 | 0 | 14 | 65 |
| 2022 | 3 | 0 | 1 | 0 | 0 | 4 | 51 |
| 2021 | 2 | 1 | 3 | 0 | 0 | 6 | 47 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 41 |
| 2019 | 4 | 2 | 0 | 0 | 0 | 6 | 41 |
| 2018 | 7 | 8 | 5 | 0 | 0 | 20 | 35 |
| 2017 | 0 | 0 | 0 | 0 | 0 | 0 | 15 |
| 2016 | 0 | 0 | 0 | 0 | 0 | 0 | 15 |
| 2015 | 0 | 0 | 0 | 0 | 0 | 0 | 15 |
| 2014 | 1 | 12 | 2 | 0 | 0 | 15 | 15 |
| Title | ||
|---|---|---|
| CVE-2026-43858 | A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43857 | A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43856 | A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code…Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43855 | A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.Advantech · ADAM-3600 | High7.5 |
| CVE-2026-43854 | A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.Advantech · ADAM-3600 | Medium6.3 |
| CVE-2026-43853 | A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.Advantech · ADAM-3600 | High8.2 |
| CVE-2026-43852 | A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.Advantech · ADAM-3600 | High8.2 |
| CVE-2026-43851 | A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.Advantech · ADAM-3600 | High8.2 |
| CVE-2026-43850 | A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43849 | A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43848 | A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43847 | A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the…Advantech · ADAM-3600 | High8.2 |
| CVE-2026-43846 | A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43845 | A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.Advantech · ADAM-3600 | Critical9.2 |
| CVE-2026-43844 | A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.Advantech · ADAM-3600 | Critical9.3 |
| CVE-2026-43843 | An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43842 | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm…Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43841 | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm…Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43840 | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected…Advantech · ADAM-3600 | Medium6.9 |
| CVE-2026-43839 | A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.Advantech · ADAM-3600 | High8.7 |
| CVE-2026-43838 | A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.Advantech · ADAM-3600 | Critical9.2 |
| CVE-2026-43837 | A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.Advantech · ADAM-3600 | High7.5 |
| CVE-2026-43836 | A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.Advantech · ADAM-3600 | Critical9.3 |
| CVE-2026-43835 | A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising…Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43834 | A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.Advantech · ADAM-3600 | High7.5 |
| CVE-2026-73177 | Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech…Advantech · EKI-1242IEIMS | High8.6 |
| CVE-2026-73176 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web…Advantech · EKI-1242IEIMS | High8.6 |
| CVE-2026-73175 | Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in…Advantech · EKI-1242IEIMS | High7.1 |
| CVE-2026-73174 | Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech…Advantech · EKI-1242IEIMS | High8.7 |
| CVE-2026-73173 | Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech…Advantech · EKI-1242IEIMS | High8.8 |
| CVE-2026-73172 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the…Advantech · EKI-1242IEIMS | Critical9.3 |
| CVE-2026-73171 | Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in…Advantech · EKI-1242IEIMS | High8.6 |
| CVE-2026-73170 | Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of…Advantech · EKI-1242IEIMS | High8.6 |
| CVE-2026-73169 | Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus…Advantech · EKI-1242IEIMS | Medium6.3 |
| CVE-2026-73167 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web…Advantech · EKI-1242IEIMS | High8.6 |
| CVE-2026-73166 | Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech…Advantech · EKI-1242IEIMS | High8.6 |
| CVE-2026-73165 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web…Advantech · EKI-1242IEIMS | High8.6 |
| CVE-2026-73164 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web…Advantech · EKI-1242IEIMS | High8.6 |
| CVE-2026-73163 | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web…Advantech · EKI-1242IEIMS | High8.6 |
| CVE-2026-19535 | Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS…Advantech · EKI-1242IEIMS | High8.6 |
| CVE-2026-79698 | Advantech WISE-6610-NB Node-RED nodered_lib_apply command injectionAdvantech · WISE-6610-NB | Critical9.4 |
| CVE-2026-79697 | Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injectionAdvantech · WISE-6610-NB | Critical9.4 |
| CVE-2026-43833 | A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.Advantech · ADAM-3600 | High7.5 |
| CVE-2026-43832 | A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the…Advantech · ADAM-3600 | Critical9.2 |
| CVE-2026-43831 | A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.Advantech · ADAM-3600 | Critical9.2 |
| CVE-2026-43830 | A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.Advantech · ADAM-3600 | High8.6 |
| CVE-2026-43829 | A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the…Advantech · ADAM-3600 | Critical9.2 |
| CVE-2026-14162 | Advantech｜Hospital Quering Management - Missing AuthenticationAdvantech · Hospital Quering Management | Critical9.3 |
| CVE-2026-14161 | Advantech｜Hospital Queuing Management - Sensitive Data ExposureAdvantech · Hospital Queuing Management | High8.7 |
| CVE-2026-6888 | SQL Injection VulnerabilityAdvantech · SaaS Composer | High7.2 |