Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,955All CVEsplus 19,141 rejected
- 349Last 24 hours3,208 in the last 7 days
- 17,025Last 30 days1,575 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 3 | 38 | 2 | 0 | 44 | 44 |
| Title | ||
|---|---|---|
| CVE-2026-71963 | Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config InjectionPublic exploitNousResearch · hermes-agent | High8.6 |
| CVE-2026-85107 | NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resourcesNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-85106 | NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgeryNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-85105 | NousResearch hermes-agent Session Management s71.py _sess_nowait authorizationNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-84289 | NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocationPublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-84288 | NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of servicePublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-84287 | NousResearch hermes-agent Session Chat api_server.py denial of servicePublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-82021 | Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch ReferenceNousResearch · hermes-agent | Critical9.0 |
| CVE-2026-82020 | Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrite via File-Write ToolNousResearch · hermes-agent | High7.6 |
| CVE-2026-18993 | NousResearch hermes-agent Memory Toolset model_tools.py access controlPublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-18976 | NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignmentPublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-18775 | NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgeryPublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-18774 | NousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgeryPublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-18773 | NousResearch hermes-agent Quick run.py _check_slash_access authorizationPublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-17432 | NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access controlPublic exploitNousResearch · hermes-agent | Low2.3 |
| CVE-2026-15311 | NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scriptingPublic exploitNousResearch · hermes-agent | Medium5.1 |
| CVE-2026-14783 | NousResearch hermes-agent skills_tool.py skill_view path traversalPublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-14628 | NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversalPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-14627 | NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper authenticationPublic exploitNousResearch · hermes-agent | Medium6.3 |
| CVE-2026-14626 | NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of servicePublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-14625 | NousResearch hermes-agent server.py shell.exec protection mechanismPublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-14617 | NousResearch hermes-agent Streaming Reasoning Tag Filter stream_consumer.py GatewayStreamConsumer._filter_and_accumulate case sensitivityPublic exploitNousResearch · hermes-agent | Low2.3 |
| CVE-2026-53870 | Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store FilesPublic exploitNousResearch · hermes-agent | Medium6.8 |
| CVE-2026-53869 | Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket EndpointsNousResearch · hermes-agent | High8.7 |
| CVE-2026-11461 | NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorizationPublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-10548 | NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authenticationPublic exploitNousResearch · hermes-agent | Medium4.8 |
| CVE-2026-10224 | NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumptionPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-10223 | NousResearch hermes-agent memory_tool.py _scan_memory_content injectionPublic exploitNousResearch · hermes-agent | Medium5.3 |
| CVE-2026-10222 | NousResearch hermes-agent config.py _sanitize_env_lines injectionPublic exploitNousResearch · hermes-agent | Medium6.3 |
| CVE-2026-10221 | NousResearch hermes-agent run_agent.py _compress_context injectionPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-10220 | NousResearch hermes-agent skills_tool.py skill_view injectionPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-9369 | NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparisonPublic exploitNousResearch · hermes-agent | Medium4.8 |
| CVE-2026-9368 | NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandboxPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-9367 | NousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injectionPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-9366 | NousResearch hermes-agent prompt_builder.py _scan_context_content injectionPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-9354 | NousResearch hermes-agent Slack Agent/Mattermost Agent escape outputPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-9353 | NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injectionPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-9352 | NousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosurePublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-9351 | NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversalPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-9350 | NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorizationPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-7397 | NousResearch hermes-agent file_tools.py _check_sensitive_path symlinkPublic exploitNousResearch · hermes-agent | Medium4.8 |
| CVE-2026-7396 | NousResearch hermes-agent WeChat Work Platform Adapter wecom.py path traversalPublic exploitNousResearch · hermes-agent | Medium6.9 |
| CVE-2026-7113 | NousResearch hermes-agent Webhooks Endpoint webhook.py missing authenticationPublic exploitNousResearch · hermes-agent | Medium6.3 |
| CVE-2026-7112 | NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authenticationPublic exploitNousResearch · hermes-agent | Medium6.3 |