Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,765All CVEsplus 19,141 rejected
- 664Last 24 hours3,065 in the last 7 days
- 17,155Last 30 days1,610 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 10 | 10 | 6 | 0 | 0 | 26 | 26 |
| Title | ||
|---|---|---|
| CVE-2026-120322 | Termix-SSH Termix transferToHost path traversalTermix-SSH · Termix | Critical9.4 |
| CVE-2026-79763 | Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)Termix-SSH · Termix | Medium5.3 |
| CVE-2026-79764 | Termix: Authenticated SSRF via `/homepage/proxy` — No Destination AllowlistTermix-SSH · Termix | High7.7 |
| CVE-2026-79762 | Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copyTermix-SSH · Termix | Medium5.5 |
| CVE-2026-79766 | Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/emailTermix-SSH · Termix | Critical9.1 |
| CVE-2026-79759 | Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host EndpointTermix-SSH · Termix | Medium4.3 |
| CVE-2026-79761 | Termix: Command injection in SSH key deployment verificationTermix-SSH · Termix | Medium6.6 |
| CVE-2026-79758 | Termix: Authenticated users can read other users' host status and clear global SSH connectionsTermix-SSH · Termix | Medium5.4 |
| CVE-2026-79760 | Termix: Authenticated blind SSRF through notification channel test endpointsTermix-SSH · Termix | Medium6.4 |
| CVE-2026-53545 | Termix: Remote Code Execution via Tunnel Disconnect pkill Command InjectionTermix-SSH · Termix | Critical9.8 |
| CVE-2026-53546 | Termix: Missing authorization in SSH host credential resolution exposes stored credentialsTermix-SSH · Termix | Critical9.6 |
| CVE-2026-53542 | Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hostsTermix-SSH · Termix | High8.8 |
| CVE-2026-53548 | Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other usersTermix-SSH · Termix | Critical9.6 |
| CVE-2026-53547 | Termix: Account Takeover via Global Settings DisclosureTermix-SSH · Termix | High8.8 |
| CVE-2026-53549 | Termix: Server-Side Request Forgery via Proxy Connectivity TestTermix-SSH · Termix | High7.7 |
| CVE-2026-45750 | Termix Vulnerable to Arbitrary Command Execution in File ManagerTermix-SSH · Termix | Critical9.0 |
| CVE-2026-45749 | Termix's TOTP two-factor authentication can be disabled or bypassed using only the account passwordTermix-SSH · Termix | High8.1 |
| CVE-2026-45748 | Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command InjectionTermix-SSH · Termix | Critical9.8 |
| CVE-2026-45746 | Termix Vulnerable to Arbitrary Command Execution via Session HijackingTermix-SSH · Termix | Critical9.0 |
| CVE-2026-45744 | Termix has an OS Command Injection in File Manager resolvePath endpointTermix-SSH · Termix | Critical9.9 |
| CVE-2026-45743 | Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)Termix-SSH · Termix | High8.1 |
| CVE-2026-45745 | Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theftTermix-SSH · Termix | High8.0 |
| CVE-2026-42454 | Termix: OS Command Injection in Docker Container Management EndpointsTermix-SSH · Termix | Critical9.9 |
| CVE-2026-42453 | Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypassTermix-SSH · Termix | High8.7 |
| CVE-2026-42452 | Termix: Pending-TOTP temporary token can regenerate backup codes and neutralize TOTPTermix-SSH · Termix | High8.1 |
| CVE-2026-22804 | Termix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in BrowserTermix-SSH · Termix | High8.0 |