Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,160All CVEsplus 19,120 rejected
- 490Last 24 hours2,790 in the last 7 days
- 16,892Last 30 days1,556 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 46 | 84 | 76 | 1 | 0 | 207 | 832 |
| 2025 | 21 | 106 | 100 | 1 | 0 | 228 | 625 |
| 2024 | 17 | 208 | 86 | 0 | 0 | 311 | 397 |
| 2023 | 4 | 19 | 27 | 0 | 0 | 50 | 86 |
| 2022 | 1 | 2 | 0 | 0 | 0 | 3 | 36 |
| 2021 | 2 | 13 | 4 | 0 | 0 | 19 | 33 |
| 2020 | 0 | 9 | 0 | 0 | 0 | 9 | 14 |
| 2019 | 1 | 0 | 0 | 0 | 0 | 1 | 5 |
| 2018 | 1 | 0 | 0 | 0 | 0 | 1 | 4 |
| 2017 | 2 | 1 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-120189 | D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflowD-Link · DIR-505 | Critical10.0 |
| CVE-2026-118579 | D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoorD-Link · DIR-505 | Critical9.3 |
| CVE-2026-113736 | D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty passwordD-Link · DHP-W610AV | Critical9.3 |
| CVE-2026-113735 | D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentialsD-Link · DCS-6501LH | Medium6.3 |
| CVE-2026-112146 | D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentialsD-Link · E15 | Medium5.3 |
| CVE-2026-110536 | D-Link DIR-868L HNAP CGI cgibin system os command injectionD-Link · DIR-868L | Critical10.0 |
| CVE-2026-108971 | D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verificationD-Link · DCS-930L | Critical9.4 |
| CVE-2026-101081 | D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflowD-Link · DI-8400 | Critical9.4 |
| CVE-2026-100740 | D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds writeD-Link · DIR-895L | Critical9.4 |
| CVE-2026-96891 | D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds writeD-Link · DIR-825 | Critical9.3 |
| CVE-2026-95675 | D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management InterfaceD-LINK · DAP-1360 | Critical9.3 |
| CVE-2026-94089 | D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflowD-Link · DIR-868L | Critical10.0 |
| CVE-2026-94050 | D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosureD-Link · DIR-X1860Z | Medium5.3 |
| CVE-2026-94036 | D-Link DIR-X1860/DIR-X1860Z routerd ubus access controlD-Link · DIR-X1860 | High8.7 |
| CVE-2026-93958 | D-Link R95 DHMAPI ssi system os command injectionD-Link · R95 | Critical9.4 |
| CVE-2026-91003 | D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflowD-Link · DI-8300 | Critical9.4 |
| CVE-2026-91001 | D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflowD-Link · DI-8400 | Critical9.4 |
| CVE-2026-90881 | D-Link DIR-882 CGI Binary dllog.cgi main information disclosureD-Link · DIR-882 | Medium6.9 |
| CVE-2026-90880 | D-Link DSL-3782 Diagnostics Diagnostics.asp system command injectionD-Link · DSL-3782 | Medium5.3 |
| CVE-2026-90706 | D-Link DWR-M921 formWsc os command injectionD-Link · DWR-M921 | Medium5.1 |
| CVE-2026-90705 | D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injectionD-Link · DWR-M921 | Medium5.1 |
| CVE-2026-90704 | D-Link DWR-M921 formDiskPartition system command injectionD-Link · DWR-M921 | Medium5.1 |
| CVE-2026-90703 | D-Link DWR-M921 formDiskCreateShare system os command injectionD-Link · DWR-M921 | Critical9.4 |
| CVE-2026-90702 | D-Link DWR-M921 formDiskFormat system os command injectionD-Link · DWR-M921 | Critical9.4 |
| CVE-2026-90699 | D-Link DWR-M920 formPinManageSetup sub_41E60C os command injectionD-Link · DWR-M920 | Critical9.4 |
| CVE-2026-90693 | D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflowD-Link · DIR-878 | Critical9.4 |
| CVE-2026-90692 | D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflowD-Link · DIR-878 | Critical9.4 |
| CVE-2026-90680 | D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflowD-Link · DIR-823G | Critical9.4 |
| CVE-2026-86510 | D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds writeD-Link · DIR-822A | Critical9.4 |
| CVE-2026-86509 | D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflowD-Link · DIR-895L | Critical9.4 |
| CVE-2026-86297 | D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-oneD-Link · DIR-605 | Critical9.2 |
| CVE-2026-86296 | D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflowD-Link · DIR-822A | Critical10.0 |
| CVE-2026-86295 | D-Link DIR-895L udhcpcd serverpacket.c sendACK command injectionD-Link · DIR-895L | Medium6.9 |
| CVE-2026-85224 | D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injectionD-Link · DNS-320 ShareCenter | Critical9.4 |
| CVE-2026-85223 | D-Link DNS-340L CGI dropbox.cgi os command injectionD-Link · DNS-340L | Critical9.4 |
| CVE-2026-85222 | D-Link DNS-340L Add-On Center addon_center.cgi os command injectionD-Link · DNS-340L | Critical9.4 |
| CVE-2026-82692 | D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injectionD-Link · DNS-340L | Critical9.4 |
| CVE-2026-82691 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injectionD-Link · DNS-320L | Critical9.4 |
| CVE-2026-82690 | D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injectionD-Link · DNS-327L | Critical9.4 |
| CVE-2026-82689 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injectionD-Link · DNS-320L | Critical9.4 |
| CVE-2026-82688 | D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injectionD-Link · DNS-340L | Critical9.4 |
| CVE-2026-82680 | D-Link DSM-G600 Multipart load_file.cgi out-of-bounds writeD-Link · DSM-G600 | High8.7 |
| CVE-2026-82595 | D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injectionD-Link · DIR-825M | Medium5.3 |
| CVE-2026-82593 | D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflowD-Link · DIR-825M | Critical9.4 |
| CVE-2026-82592 | D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflowD-Link · DIR-825M | Critical9.4 |
| CVE-2026-19893 | D-Link DIR-842 vsftpd vsftpd.conf default permissionD-Link · DIR-842 | Low2.3 |
| CVE-2026-16448 | D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injectionD-Link · DNS-120 | Medium5.3 |
| CVE-2026-16447 | D-Link DNS-320 multi_uploadify.php unrestricted uploadD-Link · DNS-320 | Medium6.9 |
| CVE-2026-16332 | D-Link DNS-320 multi_uploadify.php unrestricted uploadD-Link · DNS-320 | Medium6.9 |
| CVE-2026-16331 | D-Link DNS-320 save_ajax.php unrestricted uploadD-Link · DNS-320 | Medium6.9 |