Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,283All CVEsplus 19,140 rejected
- 449Last 24 hours2,726 in the last 7 days
- 16,929Last 30 days1,556 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 12 | 1 | 0 | 0 | 14 | 17 |
| 2025 | 0 | 3 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-48705 | MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)Project-MONAI · MONAI | Critical9.3 |
| CVE-2026-119578 | MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()Project-MONAI · MONAI | High8.5 |
| CVE-2026-118684 | MONAI before 1.6.1 Missing Integrity Verification via check_hash in DownloadsProject-MONAI · MONAI | High8.2 |
| CVE-2026-118683 | MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.confProject-MONAI · MONAI | High8.6 |
| CVE-2026-109361 | MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file PathProject-MONAI · MONAI | High7.0 |
| CVE-2026-109360 | MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTPProject-MONAI · MONAI | High7.7 |
| CVE-2026-100846 | MONAI before 1.5.2 Remote Code Execution via Pickle DeserializationProject-MONAI · MONAI | High8.8 |
| CVE-2026-100845 | MONAI before 1.6.0 Remote Code Execution via NumpyReaderProject-MONAI · MONAI | High8.5 |
| CVE-2026-100844 | MONAI before 1.6.0 OS Command Injection via dataset_name_or_idProject-MONAI · MONAI | High8.6 |
| CVE-2026-100843 | MONAI before 1.6.0 Remote Code Execution via algo_from_pickleProject-MONAI · MONAI | High8.5 |
| CVE-2026-100842 | MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute ChainsProject-MONAI · MONAI | High7.3 |
| CVE-2026-100841 | MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle CacheProject-MONAI · MONAI | High8.5 |
| CVE-2026-100840 | MONAI through 1.6.0 Remote Code Execution via bundle configurationProject-MONAI · MONAI | High8.5 |
| CVE-2026-21851 | MONAI has Path Traversal (Zip Slip) in NGC Private Bundle DownloadProject-MONAI · MONAI | Medium5.3 |
| CVE-2025-58757 | MONAI's unsafe use of Pickle deserialization may lead to RCEProject-MONAI · MONAI | High8.8 |
| CVE-2025-58756 | MONAI's unsafe torch usage may lead to arbitrary code executionProject-MONAI · MONAI | High8.8 |
| CVE-2025-58755 | MONAI has path traversal issue that may lead to arbitrary file writesProject-MONAI · MONAI | High8.8 |