Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,892All CVEsplus 19,117 rejected
- 450Last 24 hours2,944 in the last 7 days
- 16,834Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 19 | 19 | 20 | 0 | 0 | 58 | 61 |
| 2025 | 0 | 0 | 3 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-121382 | Netcore NBR100V2 auto_ac msg_aes_dec integer overflowNetcore · NBR100V2 | High8.7 |
| CVE-2026-112016 | Netcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging FilesNetcore · NR256CN | Medium6.9 |
| CVE-2026-111712 | Netcore NR256CN through 1.5.140116 Authentication Bypass via CGI Path PrefixNetcore · NR256CN | Medium6.9 |
| CVE-2026-111711 | Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()Netcore · NR256CN | Critical9.3 |
| CVE-2026-111710 | Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoSNetcore · NR256CN | High8.7 |
| CVE-2026-108932 | Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval cross site scriptingNetcore · NR268 | Medium5.3 |
| CVE-2026-108931 | Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scriptingNetcore · NR268 | Medium5.3 |
| CVE-2026-108930 | Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosureNetcore · NR268 | Medium5.1 |
| CVE-2026-108929 | Netcore NR268 DDNS DDNSset.cgi execvp argument injectionNetcore · NR268 | Critical9.4 |
| CVE-2026-108909 | Netcore NR268 CGI Endpoint cross-site request forgeryNetcore · NR268 | Medium5.3 |
| CVE-2026-108908 | Netcore NR268 Web UI l7_call_board_user_set.cgi eval cross site scriptingNetcore · NR268 | Medium4.8 |
| CVE-2026-108907 | Netcore NR268 CGI Execution user_ok improper authenticationNetcore · NR268 | Critical10.0 |
| CVE-2026-108906 | Netcore NR268 filter_arp_put_file.cgi filter_arp_put_file_cgi out-of-boundsNetcore · NR268 | High8.6 |
| CVE-2026-102241 | Netcore NAP930 Backup/Restore backup_common.sh hard-coded keyNetcore · NAP930 | Medium5.1 |
| CVE-2026-102240 | Netcore NAP930 Network Tools CGI network_tools eval os command injectionNetcore · NAP930 | Critical10.0 |
| CVE-2026-101188 | Netcore POWER13 ubus routerd.passwd_set password recoveryNetcore · POWER13 | Medium6.9 |
| CVE-2026-101077 | Netcore NR289-GE boa_temp process_request missing authenticationNetcore · NR289-GE | Critical10.0 |
| CVE-2026-101076 | Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injectionNetcore · NR289-GE | Critical10.0 |
| CVE-2026-101075 | Netcore NR289-GE Location Time location_time.cgi system os command injectionNetcore · NR289-GE | Critical10.0 |
| CVE-2026-101074 | Netcore NR289-GE Authentication boa password-check stack-based overflowNetcore · NR289-GE | Critical9.3 |
| CVE-2026-101073 | Netcore NR289-GE CGI Dispatcher boa improper authenticationNetcore · NR289-GE | Medium6.9 |
| CVE-2026-101072 | Netcore NR289-GE CGI ap_ip.cgi system os command injectionNetcore · NR289-GE | Critical10.0 |
| CVE-2026-101002 | Netcore NBR200V2 Tools Ping network_tools system os command injectionNetcore · NBR200V2 | Critical9.4 |
| CVE-2026-101001 | Netcore NBR200V2 Web Management network_tools eval os command injectionNetcore · NBR200V2 | Critical10.0 |
| CVE-2026-101000 | Netcore NBR100V2 ACL unauthenticated.json uci.apply authorizationNetcore · NBR100V2 | Critical10.0 |
| CVE-2026-94101 | Netcore NBR200V2 routerd vlan_load_form_uci buffer overflowNetcore · NBR200V2 | Critical9.4 |
| CVE-2026-94100 | Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflowNetcore · NBR200V2 | Critical9.4 |
| CVE-2026-94099 | Netcore NBR200V2 Backup Restore restore.cgi command injectionNetcore · NBR200V2 | Critical9.4 |
| CVE-2026-94098 | Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injectionNetcore · NBR200V2 | Critical9.4 |
| CVE-2026-94097 | Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injectionNetcore · NBR200V2 | Critical10.0 |
| CVE-2026-94096 | Netcore NBR200V2 LAN IP Configuration network_tools command injectionNetcore · NBR200V2 | Critical9.4 |
| CVE-2026-94095 | Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injectionNetcore · NBR200V2 | Critical9.4 |
| CVE-2026-92257 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() SinksNetcore · NR255-V | Medium5.1 |
| CVE-2026-92256 | Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read HandlersNetcore · NR255-V | High7.1 |
| CVE-2026-92255 | Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API MisuseNetcore · NR255-V | Medium5.3 |
| CVE-2026-76873 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname FieldsNetcore · NR255-V | Medium5.1 |
| CVE-2026-76872 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP/ACL Management PagesNetcore · NR255-V | Medium5.1 |
| CVE-2026-76871 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read HandlersNetcore · NR255-V | High7.1 |
| CVE-2026-76870 | Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload ValidationNetcore · NR255-V | High7.1 |
| CVE-2026-76869 | Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in reboot_timer_set.cgiNetcore · NR255-V | High8.6 |
| CVE-2026-76868 | Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_portNetcore · NR255-V | Medium6.9 |
| CVE-2026-76867 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in Route/NAT Configuration CGI HandlersNetcore · NR255-V | Medium5.1 |
| CVE-2026-76866 | Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS ParametersNetcore · NR255-V | High8.6 |
| CVE-2026-76865 | Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter HandlersNetcore · NR255-V | Medium6.9 |
| CVE-2026-76864 | Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via Unescaped QoS Rule NamesNetcore · NR255-V | Medium4.8 |
| CVE-2026-76863 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan RoutesNetcore · NR255-V | Medium5.3 |
| CVE-2026-76862 | Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch PathsNetcore · NR255-V | High8.7 |
| CVE-2026-76861 | Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in ntools_tcpdump_start_set.cgiNetcore · NR255-V | High8.7 |
| CVE-2026-76860 | Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID TokenizationNetcore · NR255-V | High8.7 |
| CVE-2026-76859 | Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via user_pass_show.cgiNetcore · NR255-V | High7.1 |