Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,248All CVEsplus 19,137 rejected
- 468Last 24 hours2,751 in the last 7 days
- 16,905Last 30 days1,553 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 5 | 17 | 15 | 0 | 38 | 51 |
| 2025 | 0 | 1 | 1 | 2 | 0 | 4 | 13 |
| 2024 | 1 | 3 | 3 | 2 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-123158 | sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to…OpenBSD · OpenSSH | High8.1 |
| CVE-2026-118374 | LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP ResponseOpenBSD · LibreSSL | High8.2 |
| CVE-2026-118373 | LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()OpenBSD · LibreSSL | Medium6.3 |
| CVE-2026-118372 | LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL PathOpenBSD · LibreSSL | Medium6.3 |
| CVE-2026-118371 | LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request LineOpenBSD · LibreSSL | Medium6.3 |
| CVE-2026-106583 | In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.OpenBSD · OpenSSH | Low2.5 |
| CVE-2026-106589 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is…OpenBSD · OpenSSH | Low2.9 |
| CVE-2026-106588 | In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.OpenBSD · OpenSSH | Low3.1 |
| CVE-2026-106587 | In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is…OpenBSD · OpenSSH | Low3.6 |
| CVE-2026-106586 | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different…OpenBSD · OpenSSH | Low2.5 |
| CVE-2026-106585 | In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.OpenBSD · OpenSSH | Medium6.5 |
| CVE-2026-106584 | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more…OpenBSD · OpenSSH | Low2.5 |
| CVE-2026-106582 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams"…OpenBSD · OpenSSH | Low3.7 |
| CVE-2026-106555 | In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.OpenBSD · OpenSSH | Low2.2 |
| CVE-2026-106553 | In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.OpenBSD · OpenSSH | Low2.2 |
| CVE-2026-106552 | In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy…OpenBSD · OpenSSH | Medium4.2 |
| CVE-2026-103547 | In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP child process client…OpenBSD · OpenBSD | Critical9.2 |
| CVE-2026-56101 | OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoSOpenBSD · OpenBSD | Medium6.0 |
| CVE-2026-73283 | In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.OpenBSD · OpenSSH | Low2.5 |
| CVE-2026-73282 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.OpenBSD · OpenSSH | Medium4.8 |
| CVE-2026-73281 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use…OpenBSD · OpenSSH | Low3.5 |
| CVE-2026-60002 | ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)OpenBSD · OpenSSH | High7.7 |
| CVE-2026-60001 | sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.OpenBSD · OpenSSH | Medium6.5 |
| CVE-2026-60000 | sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because…OpenBSD · OpenSSH | Low3.7 |
| CVE-2026-59999 | In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.OpenBSD · OpenSSH | Medium5.9 |
| CVE-2026-59998 | sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.OpenBSD · OpenSSH | Medium4.8 |
| CVE-2026-59997 | internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would…OpenBSD · OpenSSH | Medium4.2 |
| CVE-2026-59996 | scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.OpenBSD · OpenSSH | Medium4.2 |
| CVE-2026-59995 | sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.OpenBSD · OpenSSH | Medium4.2 |
| CVE-2026-57589 | sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after…OpenBSD · OpenBSD | High7.4 |
| CVE-2026-56099 | OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Inputopenbsd · src | Medium6.9 |
| CVE-2026-55706 | sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.OpenBSD · OpenBSD | Medium5.8 |
| CVE-2026-41285 | In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local…OpenBSD · OpenBSD | Medium4.3 |
| CVE-2026-35414 | OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate…OpenBSD · OpenSSH | Medium4.2 |
| CVE-2026-35388 | OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.OpenBSD · OpenSSH | Low2.5 |
| CVE-2026-35387 | OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is…OpenBSD · OpenSSH | Low3.1 |
| CVE-2026-35386 | In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username…OpenBSD · OpenSSH | Low3.6 |
| CVE-2026-35385 | In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is…OpenBSD · OpenSSH | High7.5 |
| CVE-2025-61985 | ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.OpenBSD · OpenSSH | Low3.6 |
| CVE-2025-61984 | ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution…OpenBSD · OpenSSH | Low3.6 |
| CVE-2025-32728 | In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.OpenBSD · OpenSSH | Medium4.3 |
| CVE-2025-30334 | OpenBSD wg(4) kernel crashOpenBSD · OpenBSD | High7.1 |
| CVE-2024-11149 | OpenBSD vmm GDTR limitsOpenBSD · OpenBSD | Medium6.2 |
| CVE-2024-10933 | OpenBSD readdir directory traversalOpenBSD · OpenBSD | Medium4.1 |
| CVE-2024-11148 | OpenBSD httpd(8) null dereferenceOpenBSD · OpenBSD | High8.7 |
| CVE-2024-10934 | OpenBSD NFS double-free vulnerabilityOpenBSD · OpenBSD | Critical9.2 |
| CVE-2021-35000 | OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure VulnerabilityOpenBSD · Kernel | Low3.3 |
| CVE-2021-34999 | OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure VulnerabilityOpenBSD · Kernel | Low3.8 |
| CVE-2023-52558 | OpenBSD 7.4 and 7.3 m_split() network buffer kernel crashOpenBSD · OpenBSD | High7.5 |
| CVE-2023-52557 | OpenBSD 7.3 invalid l2tp message npppd crashOpenBSD · OpenBSD | High7.5 |