Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,448All CVEsplus 18,890 rejected
- 365Last 24 hours2,978 in the last 7 days
- 17,374Last 30 days1,592 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 39 | 155 | 2 | 0 | 196 | 396 |
| 2025 | 4 | 11 | 34 | 0 | 0 | 49 | 200 |
| 2024 | 3 | 1 | 17 | 0 | 0 | 21 | 151 |
| 2023 | 2 | 10 | 17 | 2 | 0 | 31 | 130 |
| 2022 | 0 | 2 | 10 | 0 | 0 | 12 | 99 |
| 2021 | 0 | 4 | 10 | 4 | 0 | 18 | 87 |
| 2020 | 0 | 6 | 5 | 1 | 0 | 12 | 69 |
| 2019 | 3 | 5 | 6 | 0 | 0 | 14 | 57 |
| 2018 | 3 | 3 | 13 | 0 | 0 | 19 | 43 |
| 2017 | 0 | 6 | 18 | 0 | 0 | 24 | 24 |
| Title | ||
|---|---|---|
| CVE-2026-115714 | Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS ConnectionsElastic · Elastic Docker images | High7.4 |
| CVE-2026-115716 | Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of ServiceElastic · APM Server | Medium6.5 |
| CVE-2026-115715 | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-115710 | Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information DisclosureElastic · Elasticsearch | Medium4.2 |
| CVE-2026-115298 | Incorrect Authorization in Elasticsearch Leading to Information DisclosureElastic · Elasticsearch | Medium4.3 |
| CVE-2026-115297 | NULL Pointer Dereference in Packetbeat Leading to Denial of ServiceElastic · Packetbeat | Medium6.5 |
| CVE-2026-115295 | Authorization Bypass Through User-Controlled Key in Kibana Leading to Information DisclosureElastic · Kibana | Medium4.3 |
| CVE-2026-115294 | Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource DeletionElastic · Kibana | High7.3 |
| CVE-2026-115293 | Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential DisclosureElastic · Kibana | Medium6.5 |
| CVE-2026-115292 | Authorization Bypass Through User-Controlled Key in Kibana Leading to Information DisclosureElastic · Kibana | Medium4.3 |
| CVE-2026-115290 | Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | High7.5 |
| CVE-2026-115289 | Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information DisclosureElastic · APM Server | Medium4.3 |
| CVE-2026-115713 | Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data ModificationElastic · Elastic Cloud Enterprise | High7.5 |
| CVE-2026-115712 | Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform SettingsElastic · Elastic Cloud Enterprise | Medium4.3 |
| CVE-2026-115711 | Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential DisclosureElastic · Elastic Cloud Enterprise | Medium6.4 |
| CVE-2026-115709 | Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data LossElastic · Elastic Cloud Enterprise | High8.2 |
| CVE-2026-115708 | Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication BypassElastic · Elastic Cloud Enterprise | High7.2 |
| CVE-2026-115707 | Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege EscalationElastic · Elastic Cloud Enterprise | Medium6.4 |
| CVE-2026-115706 | Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege EscalationElastic · Elastic Cloud Enterprise | Medium6.8 |
| CVE-2026-103009 | Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information DisclosureElastic · Elasticsearch | High7.1 |
| CVE-2026-103008 | Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-103007 | Incorrect Authorization in Elasticsearch Leading to Privilege EscalationElastic · Elasticsearch | High7.2 |
| CVE-2026-103006 | Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-103005 | Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-102413 | Uncaught Exception in Elastic Endpoint Leading to Denial of ServiceElastic · Elastic Agent and Elastic Defend | Medium6.2 |
| CVE-2026-102412 | Incorrect Authorization in Kibana Leading to Sensitive Information DisclosureElastic · Kibana | Medium6.5 |
| CVE-2026-102411 | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-102410 | Missing Authorization in Kibana Leading to Information DisclosureElastic · Kibana | Medium4.3 |
| CVE-2026-102409 | Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-102408 | Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | Medium4.3 |
| CVE-2026-102407 | Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream ModificationElastic · Elasticsearch | Medium5.4 |
| CVE-2026-102406 | Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data InterceptionElastic · Kibana | High8.8 |
| CVE-2026-102404 | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-94408 | Uncontrolled Resource Consumption in Elasticsearch Leading to denial of serviceElastic · Elasticsearch | Medium4.9 |
| CVE-2026-94397 | Uncontrolled Resource Consumption in Elasticsearch Leading to denial of serviceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-94396 | Uncontrolled Resource Consumption in Elasticsearch Leading to denial of serviceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-94400 | Uncontrolled Resource Consumption in Kibana Leading to denial of serviceElastic · Kibana | Medium6.5 |
| CVE-2026-94399 | Uncontrolled Resource Consumption in Elasticsearch Leading to denial of serviceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-94398 | Uncontrolled Resource Consumption in Elasticsearch Leading to denial of serviceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-82300 | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-82294 | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceElastic · Elasticsearch | Medium6.5 |
| CVE-2026-78582 | Missing Authorization in Kibana Leading to Unauthorized Deletion of DataElastic · Kibana | Medium6.5 |
| CVE-2026-72662 | Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of DataElastic · Kibana | Medium6.3 |
| CVE-2026-72668 | Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege EscalationElastic · Kibana | High7.3 |
| CVE-2026-82302 | Incorrect Authorization in Kibana Leading to Unauthorized Configuration ModificationElastic · Kibana | High8.1 |
| CVE-2026-82299 | Incorrect Authorization in Kibana Leading to Information DisclosureElastic · Kibana | Medium6.5 |
| CVE-2026-82298 | Incorrect Authorization in Kibana Leading to Denial of ServiceElastic · Kibana | Medium4.3 |
| CVE-2026-78596 | Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write OperationsElastic · Kibana | Medium4.3 |
| CVE-2026-78595 | Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data DisclosureElastic · Kibana | Medium4.3 |
| CVE-2026-78593 | Improper Control of Generation of Code in Kibana Leading to Privilege EscalationElastic · Kibana | Medium4.3 |