Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,821All CVEsplus 19,115 rejected
- 501Last 24 hours2,910 in the last 7 days
- 16,816Last 30 days1,543 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 18 | 63 | 109 | 6 | 1 | 197 | 337 |
| 2025 | 0 | 6 | 24 | 8 | 0 | 38 | 140 |
| 2024 | 0 | 14 | 26 | 1 | 0 | 41 | 102 |
| 2023 | 0 | 19 | 17 | 0 | 0 | 36 | 61 |
| 2022 | 0 | 18 | 5 | 2 | 0 | 25 | 25 |
| Title | ||
|---|---|---|
| CVE-2026-76531 | Files or Directories Accessible to External Parties in Splunk SOARSplunk · Splunk SOAR | Critical9.9 |
| CVE-2026-76530 | Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOARSplunk · Splunk SOAR | High8.8 |
| CVE-2026-76529 | Improper Protection of Alternate Path in Splunk SOARSplunk · Splunk SOAR | Critical9.8 |
| CVE-2026-76528 | Protection Mechanism Failure in Splunk SOARSplunk · Splunk SOAR | Critical9.8 |
| CVE-2026-76527 | Improper Check or Handling of Exceptional Conditions in Splunk SOARSplunk · Splunk SOAR | Critical9.8 |
| CVE-2026-76526 | Improper Neutralization in Splunk SOARSplunk · Splunk SOAR | High8.8 |
| CVE-2026-76408 | Improper Control of a Resource Through its Lifetime in Splunk SOARSplunk · Splunk SOAR | Critical9.8 |
| CVE-2026-76407 | Improper Access Control in Splunk SOARSplunk · Splunk SOAR | Critical9.8 |
| CVE-2026-76406 | Information Disclosure through REST API Authentication in Splunk SOARSplunk · Splunk SOAR | Medium5.9 |
| CVE-2026-76308 | Missing Authorization through the REST API in Splunk SOARSplunk · Splunk SOAR | Medium6.5 |
| CVE-2026-76307 | Sensitive Information Disclosure through REST API Query Filters in Splunk SOARSplunk · Splunk SOAR | High7.2 |
| CVE-2026-76306 | Information Disclosure through REST API Query Filters in Splunk SOARSplunk · Splunk SOAR | High7.5 |
| CVE-2026-76305 | Improper Access Control during App Downloads in Splunk SOARSplunk · Splunk SOAR | Medium6.5 |
| CVE-2026-76304 | Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOARSplunk · Splunk SOAR | Medium4.3 |
| CVE-2026-76303 | Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOARSplunk · Splunk SOAR | Medium5.7 |
| CVE-2026-76302 | Security Hardening in Splunk Enterprise - October 2026Splunk · Splunk Enterprise | Critical9.9 |
| CVE-2026-76301 | Security Hardening in Splunk Enterprise - October 2026Splunk · Splunk Enterprise | Critical9.8 |
| CVE-2026-76300 | Security Hardening in Splunk Enterprise - October 2026Splunk · Splunk Enterprise | High8.8 |
| CVE-2026-76299 | Security Hardening in Splunk Enterprise - October 2026Splunk · Splunk Enterprise | Critical9.9 |
| CVE-2026-76298 | Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk EnterpriseSplunk · Splunk Enterprise | High8.8 |
| CVE-2026-76297 | Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.2 |
| CVE-2026-76296 | Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76295 | SPL Injection through the REST API in Splunk Secure GatewaySplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76294 | Improper Access Control in Field Extraction Management in Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76293 | Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk EnterpriseSplunk · Splunk Enterprise | High7.2 |
| CVE-2026-76292 | Missing Authorization through REST API Endpoints in Splunk Secure GatewaySplunk · Splunk Enterprise | Medium6.5 |
| CVE-2026-76291 | Improper Access Control through Scheduled Search Safeguards in Splunk EnterpriseSplunk · Splunk Enterprise | High8.8 |
| CVE-2026-76290 | Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk EnterpriseSplunk · Splunk Enterprise | High7.5 |
| CVE-2026-76289 | Denial of Service (DoS) through the REST API in Splunk EnterpriseSplunk · Splunk Enterprise | Medium6.5 |
| CVE-2026-76288 | Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk EnterpriseSplunk · Splunk Enterprise | High7.5 |
| CVE-2026-76287 | Authorization Bypass in the Data Management REST API in Splunk EnterpriseSplunk · Splunk Enterprise | Medium5.4 |
| CVE-2026-76286 | Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP ServerSplunk · Splunk MCP Server | Medium5.3 |
| CVE-2026-76285 | Improper Adherence to Coding Standards in Splunk EnterpriseSplunk · Splunk Enterprise | Critical9.8 |
| CVE-2026-76284 | Improper Neutralization in Splunk EnterpriseSplunk · Splunk Enterprise | Critical9.8 |
| CVE-2026-76283 | Protection Mechanism Failure in Splunk EnterpriseSplunk · Splunk Enterprise | High7.6 |
| CVE-2026-76282 | Improper Control of a Resource Through its Lifetime in Splunk EnterpriseSplunk · Splunk Enterprise | High8.8 |
| CVE-2026-76281 | Improper Access Control in Splunk EnterpriseSplunk · Splunk Enterprise | Not scored |
| CVE-2026-76280 | Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure GatewaySplunk · Splunk Enterprise | Medium6.3 |
| CVE-2026-76279 | Improper Input Validation of Index Names through the collect Command in Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76278 | Authorization Bypass in SPL2 Module Permissions in Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76277 | Improper Input Validation of Native Splunk Usernames through the REST API in Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.1 |
| CVE-2026-76276 | Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76275 | Improper Authorization in Search Job Listings through the REST API in Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76274 | Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability CloudSplunk · Splunk Enterprise | Medium6.5 |
| CVE-2026-76273 | Improper Input Validation through the collect Command in Splunk EnterpriseSplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76272 | Missing Access Control through the REST API in Splunk Secure GatewaySplunk · Splunk Enterprise | Medium4.3 |
| CVE-2026-76271 | Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk EnterpriseSplunk · Splunk Enterprise | Medium6.5 |
| CVE-2026-76270 | Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk EnterpriseSplunk · Splunk Enterprise | Medium6.5 |
| CVE-2026-76269 | Improper Access Control in Search Job Retrieval through the REST API in Splunk EnterpriseSplunk · Splunk Enterprise | Medium6.5 |
| CVE-2026-76268 | Missing Authentication for Critical Function in the Patroni REST API in Splunk EnterpriseSplunk · Splunk Enterprise | Critical9.8 |