Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,293All CVEsplus 19,140 rejected
- 449Last 24 hours2,722 in the last 7 days
- 16,914Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 5 | 7 | 14 | 1 | 0 | 27 | 30 |
| 2025 | 0 | 1 | 2 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-19983 | GL.iNet XE3000 NAS Command Service gl_nas_sys os command injectionGL.iNet · A1300 | Medium6.9 |
| CVE-2026-19982 | GL.iNet BE9300/MT6000 Firewall-management RPC os command injectionGL.iNet · BE9300 | Medium5.3 |
| CVE-2026-19981 | GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injectionGL.iNet · A1300 | Medium5.3 |
| CVE-2026-19980 | GL.iNet XE3000 Language Update ui.update_langs code injectionGL.iNet · A1300 | Medium5.3 |
| CVE-2026-19979 | GL.iNet XE3000 WebDAV Service MOVE authorizationGL.iNet · A1300 | Medium6.9 |
| CVE-2026-18787 | GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injectionGL.iNet · AX1800 | High8.7 |
| CVE-2026-18686 | GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injectionGL.iNet · GL-MT3000 | Critical9.3 |
| CVE-2026-18685 | GL.iNet GL-MT3000 modem.so glc set_upgrade command injectionGL.iNet · GL-MT3000 | Critical9.3 |
| CVE-2026-18684 | GL.iNet GL-MT3000 modem.so glc remove_profile command injectionGL.iNet · GL-MT3000 | Critical9.3 |
| CVE-2026-18602 | GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injectionGL.iNet · GL-MT3000 | Critical9.3 |
| CVE-2026-18601 | GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injectionGL.iNet · GL-MT3000 | Critical9.3 |
| CVE-2026-18600 | GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injectionGL.iNet · GL-MT3000 | High8.7 |
| CVE-2026-18599 | GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injectionGL.iNet · GL-MT3000 | High8.6 |
| CVE-2026-18598 | GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injectionGL.iNet · GL-MT3000 | High8.7 |
| CVE-2026-18585 | GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflowGL.iNet · MT3000 | Medium5.3 |
| CVE-2026-18584 | GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorizationGL.iNet · E5800 | Medium5.3 |
| CVE-2026-12187 | GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injectionGL.iNet · GL-MT3000 | High8.7 |
| CVE-2026-12186 | GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injectionGL.iNet · GL-MT3000 | High8.7 |
| CVE-2026-11505 | GL.iNet XE3000 glnassys hard-coded keyGL.iNet · A1300 | Low2.3 |
| CVE-2026-11452 | GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injectionGL.iNet · GL-MT3000 | Medium6.9 |
| CVE-2026-11451 | GL.iNet GL-MT3000 FTP Protocol glc snprintf command injectionGL.iNet · GL-MT3000 | Medium6.9 |
| CVE-2026-11450 | GL.iNet GL-MT3000 Path Normalization dlopen command injectionGL.iNet · GL-MT3000 | Medium6.9 |
| CVE-2026-11449 | GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injectionGL.iNet · GL-MT3000 | Medium5.3 |
| CVE-2026-11448 | GL.iNet GL-MT3000 Minidlna Service rpc realpath command injectionGL.iNet · GL-MT3000 | Medium5.1 |
| CVE-2026-11447 | GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injectionGL.iNet · GL-MT3000 | Medium5.3 |
| CVE-2026-11406 | GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injectionGL.iNet · MT3000 | Medium5.3 |
| CVE-2026-5959 | GL.iNet GL-RM1/GL-RM10/GL-RM10RC/GL-RM1PE Factory Reset improper authenticationGL.iNet · GL-RM1 | High7.5 |
| CVE-2025-2851 | GL.iNet GL-A1300 Slate Plus RPC plugins.so buffer overflowGL.iNet · GL-A1300 Slate Plus | High8.6 |
| CVE-2025-2850 | GL.iNet GL-A1300 Slate Plus Download Interface improper authorizationGL.iNet · GL-A1300 Slate Plus | Medium5.1 |
| CVE-2025-2811 | GL.iNet GL-A1300 Slate Plus API redosGL.iNet · GL-A1300 Slate Plus | Medium6.9 |