Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,673All CVEsplus 19,141 rejected
- 692Last 24 hours2,975 in the last 7 days
- 17,156Last 30 days1,607 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 5 | 0 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-105040 | EnergizeLab Eilik User-ID Mass Assignment Account TakeoverEnergizeLab · NestJS auth service | High8.8 |
| CVE-2026-105039 | EnergizeLab Station Middleware Admin APIs Missing Role ChecksEnergizeLab · station-middleware | Critical9.6 |
| CVE-2026-105038 | EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model SwitchingEnergizeLab · FastAPI AI inference server | Critical9.8 |
| CVE-2026-105037 | EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File ReadEnergizeLab · station-middleware | Critical9.9 |
| CVE-2026-105036 | EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity ChecksEnergizeLab · Robot firmware (mode 104000) | High7.5 |
| CVE-2026-105035 | EnergizeLab FirmwareUpdater Universal Hard-Coded AES KeyEnergizeLab · FirmwareUpdater | High7.8 |
| CVE-2026-105034 | EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial NumbersEnergizeLab · NestJS auth service | High8.2 |
| CVE-2026-105033 | EnergizeLab AI Station Default Root Credentials with SSH EnabledEnergizeLab · AI Station firmware (RK3562) | High8.8 |
| CVE-2026-105032 | EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File WriteEnergizeLab · FastAPI AI inference server | Critical9.1 |