Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,878All CVEsplus 19,117 rejected
  • 446Last 24 hours2,934 in the last 7 days
  • 16,821Last 30 days1,556 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20263176002626

Latest CVEs

26 CVEs, newest first

CVEs, newest first
Title
CVE-2026-35085
Stack buffer overflow in method gdv-serverconfigMBS · Single-A
High8.7
CVE-2026-35084
Stack buffer overflow in method dali-devconfigMBS · Single-A
High8.7
CVE-2026-35083
Stack buffer overflow in method bac-deviceobjectMBS · Single-A
High8.7
CVE-2026-35082
Local file inclusion vulnerability and deletion in ugw-logread methodMBS · Single-A
High8.7
CVE-2026-35081
Arbitrary process termination vulnerability in method ugw-logstopMBS · Single-A
High7.2
CVE-2026-35080
Arbitrary file delete vulnerability in method ugw-restoreinfoMBS · Single-A
High7.2
CVE-2026-35079
Arbitrary file delete vulnerability in method ugw-restoreMBS · Single-A
High7.2
CVE-2026-35078
Arbitrary file delete vulnerability in method ugw-logstopMBS · Single-A
High7.2
CVE-2026-35077
Arbitrary file delete vulnerability in method ugw-delete-fileMBS · Single-A
High7.2
CVE-2026-35076
Arbitrary file delete vulnerability in method bac-scanresultMBS · Single-A
High7.2
CVE-2026-35075
Hardcoded default Password for Service AccountMBS · Single-A
Critical9.3
CVE-2025-41772
wwwupdate.cgi Session token in URLMBS · UBR-01 Mk II
High7.5
CVE-2025-41767
Signature bypass on update uploadMBS · UBR-01 Mk II
High7.2
CVE-2025-41766
Stack buffer overflow on parsing web requestMBS · UBR-01 Mk II
High8.8
CVE-2025-41765
Unchecked role in wwwupload.cgiMBS · UBR-01 Mk II
Critical9.1
CVE-2025-41764
Unchecked role in wwwupdate.cgiMBS · UBR-01 Mk II
Critical9.1
CVE-2025-41763
Unchecked role in wwwdnload.cgiMBS · UBR-01 Mk II
Medium6.5
CVE-2025-41762
Secret leak with wwwdnload.cgiMBS · UBR-01 Mk II
Medium6.2
CVE-2025-41761
Privilege escalation possibleMBS · UBR-01 Mk II
High7.8
CVE-2025-41760
Pass filter with Empty TableMBS · UBR-01 Mk II
Medium4.9
CVE-2025-41759
Use of wildcard (“*” or “all”) in Block listMBS · UBR-01 Mk II
Medium4.9
CVE-2025-41758
Arbitrary Write with wwwupload.cgiMBS · UBR-01 Mk II
High8.8
CVE-2025-41757
Arbitrary Write with ubr-restoreMBS · UBR-01 Mk II
High8.8
CVE-2025-41756
Arbitrary Write with ubr-editfileMBS · UBR-01 Mk II
High8.1
CVE-2025-41755
Arbitrary Read with ubr-logreadMBS · UBR-01 Mk II
Medium6.5
CVE-2025-41754
Arbitrary Read with ubr-editfileMBS · UBR-01 Mk II
Medium6.5