Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,236All CVEsplus 19,120 rejected
- 472Last 24 hours2,790 in the last 7 days
- 16,902Last 30 days1,543 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 6 | 8 | 0 | 0 | 18 | 47 |
| 2025 | 1 | 1 | 6 | 1 | 0 | 9 | 29 |
| 2024 | 5 | 4 | 6 | 0 | 0 | 15 | 20 |
| 2023 | 1 | 2 | 2 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-14316 | Heap buffer overflow in boks_sshd revoked-key error handlingFortra · Core Privileged Access Manager (BoKS) | High8.1 |
| CVE-2026-9864 | Fortra BoKS Server Agent adjoin machine-account password generation vulnerabilityFortra · Core Privileged Access Manager (BoKS) | Medium4.8 |
| CVE-2026-12627 | Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerabilityFortra · Fortra's Core Privileged Access Manager (BoKS) | Critical9.8 |
| CVE-2026-79896 | Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerabilityFortra · BoKS Manager | High7.5 |
| CVE-2026-79898 | Fortra BoKS Manager crlserver command injection vulnerabilityFortra · BoKS Manager | Critical9.1 |
| CVE-2026-79899 | Fortra BoKS Manager bccgethostcert insecure temporary file vulnerabilityFortra · BoKS Manager | High7.9 |
| CVE-2026-79900 | Heap overflow in KSL checksum initializationFortra · BoKS Manager boks-server | Medium6.5 |
| CVE-2026-79901 | Predictable Active Directory service-account passwords in BoKS ManagerFortra · BoKS Manager boks-server | Critical9.9 |
| CVE-2026-15913 | Path Traversal in Fortra's GoAnywhere MFT EndpointFortra · GoAnywhere MFT | High7.7 |
| CVE-2026-12164 | Privilege Escalation in Fortra File Integrity Monitoring (FIM)Fortra · File Integrity Monitoring (FIM) | Medium4.4 |
| CVE-2026-12163 | Stored XSS in Fortra File Integrity Monitoring (FIM)Fortra · File Integrity Monitoring (FIM) | Medium5.5 |
| CVE-2026-9863 | Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerabilityFortra · Core Privileged Access Manager (BoKS) | High7.5 |
| CVE-2026-9862 | Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerabilityFortra · Core Privileged Access Manager (BoKS) | Critical9.8 |
| CVE-2026-1089 | User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS LookupsFortra · GoAnywhere MFT | Medium6.5 |
| CVE-2026-0972 | HTML Injection possible in system generated emails in Fortra's GoAnywhere MFTFortra · GoAnywhere MFT | Medium5.4 |
| CVE-2026-0971 | GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeoutFortra · GoAnywhere MFT | Medium4.3 |
| CVE-2025-14362 | GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain CircumstancesFortra · GoAnywhere MFT | High7.3 |
| CVE-2025-1241 | Encryption vulnerable to brute-force decryption in GoAnywhere MFTFortra · GoAnywhere MFT | Medium5.8 |
| CVE-2025-13532 | Weak Password Hash in Core Privileged Access Manager (BoKS)Fortra · Core Privileged Access Manager (BoKS) | Medium6.2 |
| CVE-2025-8148 | CVE-2025-8148 Improper Access Control in SFTP service of GoAnywhere MFTFortra · GoAnywhere MFT | Medium4.2 |
| CVE-2025-10035 | Deserialization Vulnerability in GoAnywhere MFT's License ServletExploitedFortra · GoAnywhere MFT | Critical10.0 |
| CVE-2025-8450 | Unrestricted File Upload in FileCatalystFortra · FileCatalyst | High8.2 |
| CVE-2025-3871 | Broken Access Control Leads to Limited Denial of Service in GoAnywhere MFT 7.8.0 and earlierFortra · GoAnywhere MFT | Medium5.3 |
| CVE-2025-5141 | Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the CacheFortra · Core Privileged Access Manager (BoKS) | Medium5.5 |
| CVE-2024-11922 | Input Validation vulnerability in Web Client emails that do not go through Secure MailFortra · GoAnywhere MFT | Medium6.3 |
| CVE-2025-0049 | Disclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.0Fortra · GoAnywhere | Low3.5 |
| CVE-2024-11923 | Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3Fortra · Fortra Application Hub | Medium5.5 |
| CVE-2024-9945 | Limited Information Disclosure in GoAnywhere MFT Prior to 7.7.0Fortra · GoAnywhere MFT | Medium5.3 |
| CVE-2024-3334 | USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0Fortra · Digital Guardian Agent | Medium4.3 |
| CVE-2024-8264 | Sensitive information in agent log file when detailed logging is enabled with Robot Schedule Enterprise prior to version 3.05Fortra · Robot Schedule Enterprise | Medium5.5 |
| CVE-2024-6632 | SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)Fortra · FileCatalyst Workflow | High7.2 |
| CVE-2024-6633 | Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)Fortra · FileCatalyst Workflow | Critical9.8 |
| CVE-2024-25157 | Authentication bypass in GoAnywhere MFT prior to 7.6.0Fortra · GoAnywhere MFT | Medium6.5 |
| CVE-2024-5276 | SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier)Fortra · FileCatalyst Workflow | Critical9.8 |
| CVE-2024-5275 | Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier)Fortra · FileCatalyst Direct | High7.8 |
| CVE-2024-4332 | Improper Authentication in Tripwire Enterprise 9.1.0 APIsFortra · Tripwire Enterprise | Critical9.3 |
| CVE-2024-0259 | Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04Fortra · Robot Schedule Enterprise Agent | High7.3 |
| CVE-2024-25156 | Path traversal in GoAnywhere MFT 7.4.1 and EarlierFortra · GoAnywhere MFT | Medium6.5 |
| CVE-2024-25155 | Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlierFortra · FileCatalyst | High7.2 |
| CVE-2024-25154 | Path Traversal in FileCatalyst Direct 3.8.8 and EarlierFortra · FileCatalyst | Medium5.3 |
| CVE-2024-25153 | Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114Fortra · FileCatalyst | Critical9.8 |
| CVE-2024-0204 | Authentication Bypass in GoAnywhere MFTFortra · GoAnywhere MFT | Critical9.8 |
| CVE-2023-6253 | Saved Uninstall Key in Digital Guardian Agent UninstallerFortra · Digital Guardian Agent | Medium6.0 |
| CVE-2023-2991 | Fortra Globalscape Administration Server Information DisclosureFortra · Globalscape EFT | Medium5.3 |
| CVE-2023-2990 | Fortra Globalscape Administration Server Denial of ServiceFortra · Globalscape EFT | High7.5 |
| CVE-2023-2989 | Fortra Globalscape Administration Server Out of Bounds Memory ReadFortra · Globalscape EFT | Critical9.1 |
| CVE-2023-0669 | Fortra GoAnywhere MFT License Response Servlet Command InjectionExploitedFortra · Goanywhere MFT | High7.2 |