Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 401,292All CVEsplus 19,140 rejected
- 453Last 24 hours2,726 in the last 7 days
- 16,938Last 30 days1,560 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 8 | 23 | 36 | 4 | 0 | 71 | 77 |
| 2025 | 0 | 1 | 0 | 1 | 0 | 2 | 6 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2022 | 0 | 2 | 0 | 0 | 0 | 2 | 4 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2019 | 0 | 0 | 1 | 0 | 0 | 1 | 2 |
| 2018 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2017 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-115642 | In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted…OpenStack · keystonemiddleware | High8.3 |
| CVE-2026-90458 | OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.OpenStack · Ironic | Medium5.4 |
| CVE-2026-89419 | OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using…OpenStack · Ironic | Medium5.0 |
| CVE-2026-115638 | OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb.OpenStack · Ironic | Medium4.3 |
| CVE-2026-93856 | In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or…OpenStack · Cinder | Medium4.3 |
| CVE-2026-71195 | In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize…OpenStack · Manila | Critical9.9 |
| CVE-2026-97147 | In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then…OpenStack · Mistral | High7.2 |
| CVE-2026-93861 | In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a…OpenStack · Mistral | Medium6.0 |
| CVE-2026-93860 | In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any…OpenStack · Mistral | High7.1 |
| CVE-2026-93858 | In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH…OpenStack · Mistral | High8.7 |
| CVE-2026-107363 | In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the…OpenStack · Zaqar | Medium6.1 |
| CVE-2026-97404 | In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an…OpenStack · Zaqar | Critical9.2 |
| CVE-2026-97149 | In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method,…OpenStack · Swift | Medium5.3 |
| CVE-2026-94572 | In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is…OpenStack · Octavia | Critical9.4 |
| CVE-2026-94571 | In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redirect_prefix fields. The…OpenStack · Octavia | Critical9.4 |
| CVE-2026-93854 | In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2/leases/{lease_id}…OpenStack · Blazar | High7.2 |
| CVE-2026-93852 | In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project without enforcing project scoping or an…OpenStack · Blazar | High7.1 |
| CVE-2026-71198 | In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download…OpenStack · Glance | High7.0 |
| CVE-2026-90461 | OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.OpenStack · Ironic | Medium6.3 |
| CVE-2026-90460 | An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 credentials, application credentials,…OpenStack · Keystone | High7.6 |
| CVE-2026-80183 | In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain…OpenStack · Keystone | High7.1 |
| CVE-2026-80184 | In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, application credentials, trusts) could be…OpenStack · Keystone | High7.6 |
| CVE-2026-80182 | In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could create new…OpenStack · Keystone | High7.6 |
| CVE-2026-77648 | In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs…OpenStack · Glance | Low2.2 |
| CVE-2026-76878 | In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the…OpenStack · Aodh | High8.4 |
| CVE-2026-74250 | In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect…OpenStack · Ironic | Medium6.3 |
| CVE-2026-74248 | OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an…OpenStack · Octavia | Medium4.3 |
| CVE-2026-71194 | In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the…OpenStack · Designate | Medium6.8 |
| CVE-2026-71193 | In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool…OpenStack · Designate | Critical9.6 |
| CVE-2026-71201 | In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another…OpenStack · Ironic | Medium5.0 |
| CVE-2026-71192 | In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-Copy-From-Account) from S3 API requests…OpenStack · Swift | Medium6.0 |
| CVE-2026-71191 | In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4 signature on presigned URL…OpenStack · Swift | Medium6.0 |
| CVE-2026-71190 | In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The…OpenStack · Swift | High8.7 |
| CVE-2026-55707 | In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets…OpenStack · Neutron | High7.1 |
| CVE-2026-66139 | OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.OpenStack · Zaqar | Medium4.8 |
| CVE-2026-66138 | In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running…OpenStack · Ironic Python Agent | High7.2 |
| CVE-2026-54422 | In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials…OpenStack · Ironic Python Agent | Medium5.5 |
| CVE-2026-54423 | In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to…OpenStack · Ironic | High8.2 |
| CVE-2026-44918 | OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.OpenStack · Ironic | Medium5.5 |
| CVE-2026-50221 | In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Device, X-Delete-At-Host,…OpenStack · Swift | Medium5.3 |
| CVE-2026-55748 | OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some…OpenStack · Horizon | Medium6.0 |
| CVE-2026-46448 | In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.OpenStack · Nova | Medium5.4 |
| CVE-2026-54421 | In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted…OpenStack · Ironic | Medium6.8 |
| CVE-2026-50589 | In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and…OpenStack · Ironic | Medium5.3 |
| CVE-2026-50266 | In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value…OpenStack · Neutron | Low2.2 |
| CVE-2026-48681 | OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.OpenStack · Ironic | Medium5.9 |
| CVE-2026-44917 | OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.OpenStack · Ironic | Medium4.9 |
| CVE-2026-41283 | OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead…OpenStack · Mistral | Critical9.9 |
| CVE-2026-46447 | OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.OpenStack · Ironic | Medium5.8 |
| CVE-2026-49299 | In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules…OpenStack · Neutron | Medium5.3 |