Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,779All CVEsplus 19,141 rejected
- 671Last 24 hours3,079 in the last 7 days
- 17,136Last 30 days1,605 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 32 | 13 | 30 | 0 | 0 | 75 | 165 |
| 2025 | 62 | 0 | 17 | 0 | 0 | 79 | 90 |
| 2024 | 0 | 3 | 1 | 0 | 0 | 4 | 11 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 7 |
| 2022 | 0 | 6 | 0 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-120345 | WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injectionWAVLINK · WN551X3-A | Critical10.0 |
| CVE-2026-120344 | WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injectionWAVLINK · WN551X3-A | Critical10.0 |
| CVE-2026-120282 | WAVLINK WN536AX6-A protocol.csp host_black os command injectionWAVLINK · WN536AX6-A | Critical9.4 |
| CVE-2026-120281 | WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflowWAVLINK · WN536AX6-A | Critical10.0 |
| CVE-2026-120280 | WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injectionWAVLINK · WN536AX6-A | Critical10.0 |
| CVE-2026-120279 | WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injectionWAVLINK · WN536AX6-A | Critical10.0 |
| CVE-2026-120278 | WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authenticationWAVLINK · WN536AX6-A | Medium6.9 |
| CVE-2026-120277 | WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injectionWAVLINK · WN536AX6-A | Critical10.0 |
| CVE-2026-120276 | WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injectionWAVLINK · WN536AX6-A | Critical10.0 |
| CVE-2026-120240 | WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injectionWAVLINK · WN553X1-B | Critical9.4 |
| CVE-2026-120239 | WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injectionWAVLINK · WN553X1-B | Critical9.4 |
| CVE-2026-120238 | WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injectionWAVLINK · WN553X1-B | Critical9.4 |
| CVE-2026-120231 | WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injectionWAVLINK · WN553X1-B | Critical9.4 |
| CVE-2026-120230 | WAVLINK WN701AE ioos Web Backend del_vlan_group os command injectionWAVLINK · WN701AE | Critical9.4 |
| CVE-2026-120229 | WAVLINK WN553X1-B ioos sub_416B50 os command injectionWAVLINK · WN553X1-B | Critical9.4 |
| CVE-2026-120228 | WAVLINK WN553X1-B ioos Service sub_416D88 os command injectionWAVLINK · WN553X1-B | Critical9.4 |
| CVE-2026-120227 | WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injectionWAVLINK · WN701AE | Critical9.4 |
| CVE-2026-120198 | WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injectionWAVLINK · WL-WN530BE1-A | Critical10.0 |
| CVE-2026-120197 | WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injectionWAVLINK · WL-WN530HG4B | Critical9.4 |
| CVE-2026-120196 | WAVLINK WN579X3-D wapi.cgi port_forward os command injectionWAVLINK · WN579X3-D | Critical9.4 |
| CVE-2026-120195 | WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injectionWAVLINK · WL-WN579A3-A | Critical10.0 |
| CVE-2026-113802 | Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file HandlerWavlink · WL-WN530BE1-A | Critical9.3 |
| CVE-2026-110958 | Wavlink WN530HG4B api.cgi heap-based overflowWavlink · WN530HG4B | Critical10.0 |
| CVE-2026-110957 | Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injectionWavlink · WL-WN530BE2-A | Critical10.0 |
| CVE-2026-109110 | Wavlink WL-WN592AX6 wmapd system os command injectionWavlink · WL-WN592AX6 | Critical10.0 |
| CVE-2026-109109 | Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflowWavlink · WL-WN530BE1-A | Critical10.0 |
| CVE-2026-109108 | Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injectionWavlink · WL-WN530BE1-A | Critical9.4 |
| CVE-2026-109107 | Wavlink WL-WN592AX6 upload.cgi main null pointer dereferenceWavlink · WL-WN592AX6 | Medium6.9 |
| CVE-2026-74843 | Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflowWavlink · WN531P3 | Critical10.0 |
| CVE-2026-18607 | Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflowWavlink · WN572 | High8.7 |
| CVE-2026-18590 | Wavlink WL-NU516U1 Admin Password adm.cgi set_sys_adm os command injectionWavlink · WL-NU516U1 | Medium5.3 |
| CVE-2026-18589 | Wavlink WL-NU516U1 nas.cgi change_password stack-based overflowWavlink · WL-NU516U1 | Critical9.3 |
| CVE-2026-18588 | Wavlink WL-NU516U1 nas.cgi fgets stack-based overflowWavlink · WL-NU516U1 | Critical9.3 |
| CVE-2026-18587 | Wavlink WL-NU516U1 Config Import os command injectionWavlink · WL-NU516U1 | High7.7 |
| CVE-2026-15513 | Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injectionWavlink · WL-NU516U1 | Medium5.3 |
| CVE-2026-13539 | Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflowWavlink · WL-NU516U1-A | High8.7 |
| CVE-2026-13538 | Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injectionWavlink · WL-NU516U1-A | Medium5.3 |
| CVE-2026-8230 | Wavlink NU516U1 login.cgi sys_login1 os command injectionWavlink · NU516U1 | Medium5.3 |
| CVE-2026-8229 | Wavlink NU516U1 wireless.cgi WifiBasic os command injectionWavlink · NU516U1 | Medium5.3 |
| CVE-2026-8228 | Wavlink NU516U1 wireless.cgi advance os command injectionWavlink · NU516U1 | Medium5.3 |
| CVE-2026-8227 | Wavlink NU516U1 adm.cgi wzdapMesh os command injectionWavlink · NU516U1 | Medium5.3 |
| CVE-2026-8192 | Wavlink NU516U1 adm.cgi wzdap os command injectionWavlink · NU516U1 | Medium5.3 |
| CVE-2026-8191 | Wavlink NU516U1 adm.cgi wifi_region os command injectionWavlink · NU516U1 | Medium5.3 |
| CVE-2026-8190 | Wavlink NU516U1 adm.cgi wan os command injectionWavlink · NU516U1 | Medium5.3 |
| CVE-2026-8189 | Wavlink NU516U1 adm.cgi wzdrepeater os command injectionWavlink · NU516U1 | Medium5.3 |
| CVE-2026-8188 | Wavlink NU516U1 adm.cgi change_wifi_password os command injectionWavlink · NU516U1 | Medium5.3 |
| CVE-2026-7692 | Wavlink WL-WN570HA1 adm.cgi ping_ddns command injectionWavlink · WL-WN570HA1 | Medium5.3 |
| CVE-2026-7691 | Wavlink WL-WN570HA1 adm.cgi set_sys_cmd command injectionWavlink · WL-WN570HA1 | Medium5.3 |
| CVE-2026-7690 | Wavlink WL-WN570HA1 adm.cgi set_sys_adm command injectionWavlink · WL-WN570HA1 | Medium5.3 |
| CVE-2026-6559 | Wavlink WL-WN579A3 login.cgi sub_401F80 cross site scriptingWavlink · WL-WN579A3 | Medium5.3 |