Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,558All CVEsplus 18,890 rejected
- 408Last 24 hours3,027 in the last 7 days
- 17,424Last 30 days1,597 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 6 | 10 | 2 | 0 | 0 | 18 | 18 |
| Title | ||
|---|---|---|
| CVE-2026-86711 | electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridgeelecterm · electerm | High7.5 |
| CVE-2026-49253 | electerm: Path Traversal in Zmodem and Trzsz Download Filename Handlingelecterm · electerm | High7.1 |
| CVE-2026-49255 | electerm: Command Injection in File System Operations (rmrf, mv, cp)electerm · electerm | High8.8 |
| CVE-2026-73227 | electerm's RDP clipboard file download may parse unsafe file nameelecterm · electerm | High8.1 |
| CVE-2026-73226 | Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlistelecterm · electerm | High8.8 |
| CVE-2026-73225 | electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filenameelecterm · electerm | High8.1 |
| CVE-2026-73224 | Electerm check folder size function may get attacked by unsafe folder nameelecterm · electerm | High8.8 |
| CVE-2026-73223 | electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filenameelecterm · electerm | High8.1 |
| CVE-2026-45058 | electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmarkelecterm · electerm | Critical9.4 |
| CVE-2026-45353 | electerm: Local code through electerm's single-instance socketelecterm · electerm | Critical9.3 |
| CVE-2026-45787 | electerm's encrypt method not safe enoughelecterm · electerm | Medium6.0 |
| CVE-2026-43944 | electerm: dangerous code can be run through links or command lineelecterm · electerm | Critical9.4 |
| CVE-2026-43942 | electerm: Full process.env exposed to renderer via window.pre.env in electermelecterm · electerm | Medium5.5 |
| CVE-2026-43941 | Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link clickelecterm · electerm | Critical9.6 |
| CVE-2026-43940 | electerm: Path traversal in electerm runWidget leads to arbitrary code executionelecterm · electerm | High8.4 |
| CVE-2026-43943 | electerm: RCE via malicious SSH server filename in openFileWithEditorelecterm · electerm | High7.8 |
| CVE-2026-41500 | electerm has Command Injection Vulnerability via runMac functionelecterm · electerm | Critical9.8 |
| CVE-2026-41501 | electerm has Command Injection Vulnerability via runLinux functionelecterm · electerm | Critical9.8 |