Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,091All CVEsplus 18,873 rejected
- 777Last 24 hours3,293 in the last 7 days
- 17,426Last 30 days1,557 of them critical
- 1,766Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 20 | 8 | 2 | 0 | 30 | 42 |
| 2025 | 0 | 1 | 8 | 0 | 0 | 9 | 12 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2018 | 0 | 3 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-111233 | Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.phpNetgate · pfSense CE | Low2.3 |
| CVE-2026-111232 | Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator ColorNetgate · pfSense CE | Medium4.8 |
| CVE-2026-111231 | Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()Netgate · pfSense CE | High8.6 |
| CVE-2026-111230 | Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URLNetgate · pfSense CE | Medium6.9 |
| CVE-2026-111229 | Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA SyncNetgate · pfSense CE | High8.6 |
| CVE-2026-111228 | Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.phpNetgate · pfSense CE | Medium5.1 |
| CVE-2026-111227 | Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.phpNetgate · pfSense CE | Medium5.1 |
| CVE-2026-111226 | Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.phpNetgate · pfSense CE | High8.6 |
| CVE-2026-111225 | Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.shNetgate · pfSense CE | Low2.3 |
| CVE-2026-111224 | Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.shNetgate · pfSense CE | High7.7 |
| CVE-2026-111223 | Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login BannerNetgate · pfSense CE | High8.6 |
| CVE-2026-111222 | Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone SettingNetgate · pfSense CE | High7.5 |
| CVE-2026-111221 | Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf InjectionNetgate · pfSense CE | High7.5 |
| CVE-2026-111220 | Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpidNetgate · pfSense CE | High8.6 |
| CVE-2026-111219 | Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server UsernameNetgate · pfSense CE | High7.5 |
| CVE-2026-111218 | Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper LimitersNetgate · pfSense CE | High8.6 |
| CVE-2026-111217 | Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHIDNetgate · pfSense CE | High8.6 |
| CVE-2026-111216 | Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IPNetgate · pfSense CE | High8.6 |
| CVE-2026-111215 | Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent InterfaceNetgate · pfSense CE | High8.6 |
| CVE-2026-111214 | Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.phpNetgate · pfSense CE | High8.6 |
| CVE-2026-110908 | Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An…Netgate · pfSense-pkg-frr | High8.8 |
| CVE-2026-97730 | In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data…Netgate · pfSense Plus | High8.5 |
| CVE-2026-56128 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.phpNetgate · pfSense Plus | Medium5.1 |
| CVE-2026-56127 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.phpNetgate · pfSense Plus | Medium5.1 |
| CVE-2026-56126 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.phpNetgate · pfSense Plus | Medium5.1 |
| CVE-2026-67189 | pfSense Plus/CE Stored XSS via Traffic Graphs PTR RecordNetgate · pfSense Plus | Medium5.3 |
| CVE-2016-20058 | Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege EscalationNetgate · NETGATE AMITI Antivirus | High8.5 |
| CVE-2016-20057 | NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege EscalationNetgate · NETGATE Registry Cleaner | High8.5 |
| CVE-2019-25271 | NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service PathNETGATE · Data Backup | High8.5 |
| CVE-2019-25269 | Amiti Antivirus 25.0.640 - Unquoted Service Path VulnerabilityNetgate · Amiti Antivirus | High8.5 |
| CVE-2025-12490 | Netgate pfSense CE Suricata Path Traversal Remote Code Execution VulnerabilityNetgate · pfSense | High8.8 |
| CVE-2025-34178 | Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site ScriptingNetgate · pfSense CE | Medium5.1 |
| CVE-2025-34177 | Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site ScriptingNetgate · pfSense CE | Medium5.1 |
| CVE-2025-34176 | Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information DisclosureNetgate · pfSense CE | Medium5.3 |
| CVE-2025-34175 | Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site ScriptingNetgate · pfSense CE | Medium5.1 |
| CVE-2025-34174 | Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site ScriptingNetgate · pfSense CE | Medium5.1 |
| CVE-2025-34173 | Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information DisclosureNetgate · pfSense CE | Medium5.3 |
| CVE-2025-34172 | Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site ScriptingNetgate · pfSense CE | Medium4.8 |
| CVE-2025-53392 | In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal.…Netgate · pfSense | Medium5.0 |
| CVE-2018-4021 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The…Netgate · Netgate pfSense | High7.2 |
| CVE-2018-4020 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The…Netgate · Netgate pfSense | High7.2 |
| CVE-2018-4019 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The…Netgate · Netgate pfSense | High7.2 |