Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,292All CVEsplus 19,140 rejected
- 451Last 24 hours2,724 in the last 7 days
- 16,915Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 9 | 1 | 0 | 0 | 11 | 15 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2024 | 1 | 3 | 0 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-104080 | Control Web Panel (CWP) < 1.29 OS Command Injection via valid_tokenControl Web Panel · Control Web Panel | High8.5 |
| CVE-2026-77881 | Control Web Panel (CWP) < 1.29 Blind SQL Injection via user ParameterControl Web Panel · Control Web Panel | Medium6.8 |
| CVE-2026-77880 | Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/Control Web Panel · Control Web Panel | High8.5 |
| CVE-2026-77879 | Control Web Panel (CWP) < 1.16 SQL Injection via access_token() APIControl Web Panel · Control Web Panel | High8.4 |
| CVE-2026-77878 | Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase APIControl Web Panel · Control Web Panel | High8.5 |
| CVE-2026-77877 | Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root AccessControl Web Panel · Control Web Panel | High8.5 |
| CVE-2026-77876 | Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directoryControl Web Panel · Control Web Panel | High8.7 |
| CVE-2026-73697 | Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editorControl Web Panel · Control Web Panel | High8.7 |
| CVE-2026-73696 | Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndexControl Web Panel · Control Web Panel | High8.6 |
| CVE-2026-73695 | Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.phpControl Web Panel · Control Web Panel | High8.7 |
| CVE-2026-57517 | Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes ParameterControl Web Panel · Control Web Panel | Critical9.3 |
| CVE-2023-42123 | Control Web Panel mysql_manager Command Injection Remote Code Execution VulnerabilityControl Web Panel · Control Web Panel | High8.8 |
| CVE-2023-42122 | Control Web Panel wloggui Command Injection Local Privilege Escalation VulnerabilityControl Web Panel · Control Web Panel | High7.8 |
| CVE-2023-42121 | Control Web Panel Missing Authentication Remote Code Execution VulnerabilityControl Web Panel · Control Web Panel | Critical9.8 |
| CVE-2023-42120 | Control Web Panel dns_zone_editor Command Injection Remote Code Execution VulnerabilityControl Web Panel · Control Web Panel | High8.8 |