Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,247All CVEsplus 18,875 rejected
- 795Last 24 hours3,084 in the last 7 days
- 17,422Last 30 days1,573 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 15 | 19 | 75 | 16 | 0 | 125 | 977 |
| 2025 | 13 | 46 | 142 | 36 | 0 | 237 | 852 |
| 2024 | 10 | 33 | 65 | 13 | 0 | 121 | 615 |
| 2023 | 14 | 68 | 96 | 20 | 0 | 198 | 494 |
| 2022 | 7 | 35 | 48 | 10 | 0 | 100 | 296 |
| 2021 | 5 | 43 | 70 | 5 | 0 | 123 | 196 |
| 2020 | 3 | 8 | 19 | 0 | 0 | 30 | 73 |
| 2019 | 2 | 9 | 19 | 0 | 0 | 30 | 43 |
| 2018 | 0 | 1 | 1 | 0 | 0 | 2 | 13 |
| 2017 | 1 | 3 | 7 | 0 | 0 | 11 | 11 |
| Title | ||
|---|---|---|
| CVE-2026-106174 | A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device…Fortinet · FortiOS | Medium6.7 |
| CVE-2026-107656 | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9,…Fortinet · FortiSandbox | Critical9.6 |
| CVE-2026-106175 | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0…Fortinet · FortiOS | Low2.1 |
| CVE-2026-106172 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all…Fortinet · FortiSandbox | Medium4.9 |
| CVE-2026-23707 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…Fortinet · FortiManager Cloud | Medium6.5 |
| CVE-2026-23706 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…Fortinet · FortiAnalyzer Cloud | Medium5.9 |
| CVE-2026-23705 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…Fortinet · FortiAnalyzer | Medium6.5 |
| CVE-2025-46773 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…Fortinet · FortiAnalyzer Cloud | High7.9 |
| CVE-2025-57739 | An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0…Fortinet · FortiMail | High7.7 |
| CVE-2026-106170 | An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4…Fortinet · FortiSandbox | Medium4.8 |
| CVE-2026-106173 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute…Fortinet · FortiSIEM | Critical9.4 |
| CVE-2026-106176 | A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP…Fortinet · FortiSIEM | Low3.4 |
| CVE-2026-106171 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0…Fortinet · FortiManager | Medium5.3 |
| CVE-2026-104286 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0…ExploitedFortinet · FortiMail | Critical9.8 |
| CVE-2026-84388 | A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all…Fortinet · FortiPAM Chrome Extension | Critical9.1 |
| CVE-2026-84390 | A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2…Fortinet · FortiMonitorOnSight | Critical9.6 |
| CVE-2026-84392 | A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions,…Fortinet · FortiOS | Low2.5 |
| CVE-2026-22575 | An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions,…Fortinet · FortiManager | Medium4.7 |
| CVE-2026-84391 | A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector…Fortinet · FortiAnalyzer | Medium5.9 |
| CVE-2026-84393 | A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow…Fortinet · FortiOS | High7.3 |
| CVE-2026-26084 | A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5,…Fortinet · FortiSandbox PaaS | High8.9 |
| CVE-2026-84385 | A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions,…Fortinet · FortiSOAR on-premise | Medium4.9 |
| CVE-2026-84389 | A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker…Fortinet · FortiSIEM | Low2.8 |
| CVE-2026-84387 | An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0,…Fortinet · FortiSandbox | Medium6.7 |
| CVE-2026-84386 | A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper…Fortinet · FortiClientWindows | Medium4.7 |
| CVE-2026-70468 | A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5…Fortinet · FortiManager | High7.3 |
| CVE-2026-26035 | An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through…Fortinet · FortiWeb | High8.8 |
| CVE-2026-70466 | A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions,…Fortinet · FortiWeb | Medium4.8 |
| CVE-2026-71407 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can…Fortinet · FortiOS | Medium5.1 |
| CVE-2026-70467 | A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all…Fortinet · FortiSIEM | Low3.4 |
| CVE-2026-71408 | A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all…Fortinet · FortiOS | Medium5.0 |
| CVE-2026-70465 | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows…Fortinet · FortiClientWindows | High7.3 |
| CVE-2026-59838 | A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4,…Fortinet · FortiSIEM | Medium5.3 |
| CVE-2026-59840 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions,…Fortinet · FortiOS | Medium4.1 |
| CVE-2025-43892 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions,…Fortinet · FortiOS | Medium4.1 |
| CVE-2026-23573 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through…Fortinet · FortiOS | Medium6.1 |
| CVE-2026-59839 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through…Fortinet · FortiProxy | Medium5.0 |
| CVE-2025-62826 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0…Fortinet · FortiPAM | Low3.1 |
| CVE-2025-62675 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0…Fortinet · FortiOS | Low3.4 |
| CVE-2026-59836 | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all…Fortinet · FortiClientEMS | Medium6.7 |
| CVE-2026-59841 | A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to…Fortinet · FortiSIEMWindowsAgent | Medium6.9 |
| CVE-2025-53379 | A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated…Fortinet · FortiAuthenticator | High7.0 |
| CVE-2026-59835 | A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an…Fortinet · FortiSandbox | High7.7 |
| CVE-2026-59837 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all…Fortinet · FortiOS | Medium5.9 |
| CVE-2025-67862 | An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0…Fortinet · FortiOS | Medium6.0 |
| CVE-2026-25089 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,…ExploitedFortinet · FortiSandbox | Critical9.1 |
| CVE-2026-49938 | A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow…Fortinet · FortiPortal | Medium6.2 |
| CVE-2025-53870 | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP…Fortinet · FortiAP | Medium6.5 |
| CVE-2025-53680 | An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0…Fortinet · FortiAP-U | Medium6.1 |
| CVE-2025-67604 | A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all…Fortinet · FortiAnalyzer | Medium5.2 |