Skip to content
CVE Tracker

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,244All CVEsplus 18,875 rejected
  • 801Last 24 hours3,086 in the last 7 days
  • 17,420Last 30 days1,568 of them critical
  • 1,767Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
202612200510
20250000005
20240000005
20230000005
20220000005
20211110035
20200000002
20190000002
20180000002
20172000022

Latest CVEs

10 CVEs, newest first

CVEs, newest first
Title
CVE-2026-28256
Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer ConciergeTrane · Tracer SC
Medium6.9
CVE-2026-28255
Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer ConciergeTrane · Tracer SC
High8.2
CVE-2026-28254
Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer ConciergeTrane · Tracer SC
Medium6.9
CVE-2026-28253
Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer ConciergeTrane · Tracer SC
High8.7
CVE-2026-28252
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer ConciergeTrane · Tracer SC
Critical9.2
CVE-2021-38448
Trane Symbio Improper Control of Generation of CodeTrane · Symbio
High7.5
CVE-2021-38450
Trane Tracer Code InjectionTrane · Tracer SC
Critical9.9
CVE-2021-42534
Trane Building Automation Controllers Cross-site ScriptingTrane · Tracer SC
Medium6.3
CVE-2015-2868
An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. An attacker who can connect to the…Trane · ComfortLink II SCC firmware
Critical9.8
CVE-2015-2867
A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.Trane · ComfortLink II SCC firmware
Critical9.8