Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,082All CVEsplus 19,119 rejected
- 502Last 24 hours2,856 in the last 7 days
- 16,885Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 7 | 25 | 9 | 1 | 0 | 42 | 42 |
| Title | ||
|---|---|---|
| CVE-2026-119577 | ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol ConnectionsArcadeData · arcadedb | High7.6 |
| CVE-2026-119576 | ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query EndpointArcadeData · arcadedb | Medium5.3 |
| CVE-2026-119575 | ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block ListArcadeData · arcadedb | High7.1 |
| CVE-2026-114059 | ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing AuthorizationArcadeData · arcadedb | High7.7 |
| CVE-2026-114058 | ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt ProtocolArcadeData · arcadedb | Medium5.3 |
| CVE-2026-114057 | ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information DisclosureArcadeData · arcadedb | Medium5.3 |
| CVE-2026-114056 | ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITHArcadeData · arcadedb | Medium5.3 |
| CVE-2026-93598 | ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundleArcadeData · arcadedb | High7.1 |
| CVE-2026-93597 | ArcadeDB before 26.9.1 SSRF via IPv6 transition addressesArcadeData · arcadedb | Medium5.3 |
| CVE-2026-93596 | ArcadeDB before 26.9.1 Authorization Bypass via Batch Edge ConnectArcadeData · arcadedb | Medium5.3 |
| CVE-2026-93595 | ArcadeDB before 26.9.1 ACL Bypass via query_database ToolArcadeData · arcadedb | High7.1 |
| CVE-2026-93594 | ArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeriesArcadeData · arcadedb | High7.1 |
| CVE-2026-93593 | ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type PermissionArcadeData · arcadedb | High8.6 |
| CVE-2026-65831 | ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file readArcadeData · arcadedb | High7.7 |
| CVE-2026-54077 | ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated usersArcadeData · arcadedb | High7.1 |
| CVE-2026-54076 | ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)ArcadeData · arcadedb | High8.1 |
| CVE-2026-76225 | ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSVArcadeData · arcadedb | High8.3 |
| CVE-2026-76224 | ArcadeDB before 26.8.1 Remote Code Execution via Groovy FallbackArcadeData · arcadedb | High8.7 |
| CVE-2026-76223 | ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTIONArcadeData · arcadedb | High7.1 |
| CVE-2026-75855 | ArcadeDB before 26.8.1 Path Traversal via create/drop databaseArcadeData · arcadedb | High8.4 |
| CVE-2026-75854 | ArcadeDB Redis Wire-Protocol Plugin Missing AuthenticationArcadeData · arcadedb | Critical9.3 |
| CVE-2026-75853 | ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-DatabaseArcadeData · arcadedb | High8.7 |
| CVE-2026-75852 | ArcadeDB MongoDB wire protocol authentication bypass cross-databaseArcadeData · arcadedb | Critical9.3 |
| CVE-2026-75851 | ArcadeDB before 26.8.1 Authentication Bypass via Async CommandArcadeData · arcadedb | Critical9.4 |
| CVE-2026-75850 | ArcadeDB before 26.8.1 Per-Type ACL Bypass via Batch HandlersArcadeData · arcadedb | Low2.3 |
| CVE-2026-75846 | ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTIONArcadeData · arcadedb | High7.1 |
| CVE-2026-75845 | ArcadeDB 26.4.2 before 26.8.1 Authorization Bypass via set_server_settingArcadeData · arcadedb | Medium5.3 |
| CVE-2026-75844 | ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypassArcadeData · arcadedb | High7.1 |
| CVE-2026-75843 | ArcadeDB before 26.8.1 Privilege Escalation via gRPC TransactionArcadeData · arcadedb | Critical9.4 |
| CVE-2026-75842 | ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSVArcadeData · arcadedb | High8.3 |
| CVE-2026-75841 | ArcadeDB before 26.8.1 Denial of Service via range()ArcadeData · arcadedb | Medium5.3 |
| CVE-2026-75840 | ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped RegexArcadeData · arcadedb | High8.7 |
| CVE-2026-75839 | ArcadeDB before 26.8.1 Information Disclosure via Cluster EndpointsArcadeData · arcadedb | Medium5.3 |
| CVE-2026-68578 | ArcadeDB before 26.7.3 Authentication Bypass via MCP TransportArcadeData · arcadedb | High7.7 |
| CVE-2026-67357 | ArcadeDB before 26.7.3 Information Disclosure via get_server_settingsArcadeData · arcadedb | High7.7 |
| CVE-2026-67356 | ArcadeDB before 26.7.3 Privilege Escalation via JavaScript TriggerArcadeData · arcadedb | High8.7 |
| CVE-2026-67340 | ArcadeDB before 26.7.2 Remote Code Execution via Trigger ScriptsArcadeData · arcadedb | High8.6 |
| CVE-2026-67344 | ArcadeDB before 26.7.2 Authentication Bypass via ALTER TYPEArcadeData · arcadedb | High8.5 |
| CVE-2026-67341 | ArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTIONArcadeData · arcadedb | Critical9.3 |
| CVE-2026-67343 | ArcadeDB before 26.7.2 Cluster Token Disclosure via GET /api/v1/serverArcadeData · arcadedb | High8.7 |
| CVE-2026-67342 | ArcadeDB before 26.7.2 Authorization Bypass via Database HandlersArcadeData · arcadedb | Critical9.3 |
| CVE-2026-44221 | ArcadeDB: Cross-database authorization bypass and unsecured newly-created databasesArcadeData · arcadedb | Critical9.0 |