Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,091All CVEsplus 19,119 rejected
  • 500Last 24 hours2,828 in the last 7 days
  • 16,878Last 30 days1,552 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026178001621
20250011025
20240000003
20230011023
20220000001
20210000001
20200100011

Latest CVEs

21 CVEs, newest first

CVEs, newest first
Title
CVE-2026-102809
PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 CommandPX4 · PX4-Autopilot
High7.1
CVE-2026-102808
PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stressPX4 · PX4-Autopilot
High7.1
CVE-2026-86714
PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netmanPX4 · PX4-Autopilot
Medium5.3
CVE-2026-86713
PX4 Autopilot through 1.17.0 Use-After-Free in load_monPX4 · PX4-Autopilot
High7.1
CVE-2026-86097
PX4 Autopilot through 1.17.0 Null Pointer Dereference via param selectPX4 · PX4-Autopilot
High7.1
CVE-2026-86096
PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task StartupPX4 · PX4-Autopilot
Medium6.0
CVE-2026-84698
PX4 Autopilot sd_bench Heap Buffer Overflow via Block SizePX4 · PX4-Autopilot
High7.1
CVE-2026-1579
PX4 Autopilot Missing authentication for critical functionPX4 · Autopilot
Critical9.3
CVE-2026-32743
PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request HandlingPX4 · PX4-Autopilot
Medium6.5
CVE-2026-32724
PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race ConditionPX4 · PX4-Autopilot
Medium5.3
CVE-2026-32713
PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File DescriptorsPX4 · PX4-Autopilot
Medium4.3
CVE-2026-32709
PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete)PX4 · PX4-Autopilot
Medium5.4
CVE-2026-32708
Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot)PX4 · PX4-Autopilot
High7.8
CVE-2026-32707
PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loopPX4 · PX4-Autopilot
Medium5.2
CVE-2026-32706
PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packetPX4 · PX4-Autopilot
High7.1
CVE-2026-32705
PX4 autopilot BST Device Name Length Can Overflow Driver BufferPX4 · PX4-Autopilot
Medium6.8
CVE-2025-15150
PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflowPX4 · PX4-Autopilot
Medium4.8
CVE-2025-9020
PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after freePX4 · PX4-Autopilot
Low2.0
CVE-2023-47625
Global Buffer Overflow leading to denial of service in PX4-AutopilotPX4 · PX4-Autopilot
Low2.9
CVE-2023-46256
PX4-Autopilot Heap Buffer Overflow BugPX4 · PX4-Autopilot
Medium4.4
CVE-2020-10283
RVD#3317: MAVLink version handshaking allows for an attacker to bypass authenticationPX4 · MAVLink
High8.1