Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,313All CVEsplus 19,140 rejected
  • 464Last 24 hours2,731 in the last 7 days
  • 16,922Last 30 days1,560 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202601300413
20250423099

Latest CVEs

13 CVEs, newest first

CVEs, newest first
Title
CVE-2026-119556
Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitemsMoodle Project · moodle
Medium5.3
CVE-2026-119555
Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedbackMoodle Project · moodle
Medium5.3
CVE-2026-119554
Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumberMoodle Project · moodle
Medium6.0
CVE-2026-119553
Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path TraversalMoodle Project · moodle
High7.1
CVE-2025-26533
SQL injection risk in course search module list filterMoodle Project · moodle
High8.1
CVE-2025-26532
Teachers can evade trusttext config when restoring glossary entriesMoodle Project · moodle
Low3.1
CVE-2025-26531
IDOR in badges allows disabling of arbitrary badgesMoodle Project · moodle
Low3.1
CVE-2025-26530
Reflected XSS via question bank filterMoodle Project · moodle
High8.3
CVE-2025-26529
Stored XSS risk in admin live logMoodle Project · moodle
High8.3
CVE-2025-26528
Stored XSS in ddimageortext question typeMoodle Project · moodle
Low3.4
CVE-2025-26527
Non-searchable tags can still be discovered on the tag search page and in the tags blockMoodle Project · moodle
Medium5.3
CVE-2025-26526
Feedback response viewing and deletions did not respect Separate Groups modeMoodle Project · moodle
Medium6.5
CVE-2025-26525
Arbitrary file read risk through pdfTeXMoodle Project · moodle
High8.6