Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,222All CVEsplus 19,120 rejected
  • 503Last 24 hours2,797 in the last 7 days
  • 16,898Last 30 days1,543 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260113001414

Latest CVEs

14 CVEs, newest first

CVEs, newest first
Title
CVE-2026-16198
Sipeed PicoClaw First Run Setup access_control.go authentication bypassSipeed · PicoClaw
Medium6.3
CVE-2026-16197
Sipeed PicoClaw Group Message feishu_64.go handleMessageReceive authorizationSipeed · PicoClaw
Medium5.3
CVE-2026-16196
Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgerySipeed · PicoClaw
Medium5.3
CVE-2026-16195
Sipeed PicoClaw Group Message wecom.go dispatchIncoming authorizationSipeed · PicoClaw
Medium5.3
CVE-2026-16085
Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphereSipeed · PicoClaw
Medium4.8
CVE-2026-16084
Sipeed PicoClaw web.go web_fetch server-side request forgerySipeed · PicoClaw
Medium6.9
CVE-2026-16083
Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replaySipeed · PicoClaw
Medium6.9
CVE-2026-16082
Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctouSipeed · PicoClaw
Medium4.8
CVE-2026-16081
Sipeed PicoClaw auth.go cross-site request forgerySipeed · PicoClaw
Medium5.3
CVE-2026-15320
Sipeed PicoClaw pico.go rt.ReloadConfig authorizationSipeed · PicoClaw
Medium5.3
CVE-2026-15319
Sipeed PicoClaw Launcher access_control.go IPAllowlist access controlSipeed · PicoClaw
Medium6.9
CVE-2026-15318
Sipeed PicoClaw MQTT Channel mqtt.go authorizationSipeed · PicoClaw
Medium5.3
CVE-2026-15317
Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgerySipeed · PicoClaw
Medium5.3
CVE-2026-32296
Sipeed NanoKVM unauthenticated Wi-Fi configuration endpointSipeed · NanoKVM
High8.8