Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,359All CVEsplus 19,141 rejected
- 467Last 24 hours2,745 in the last 7 days
- 16,926Last 30 days1,563 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 14 | 3 | 0 | 0 | 21 | 45 |
| 2025 | 0 | 2 | 4 | 0 | 0 | 6 | 24 |
| 2024 | 1 | 5 | 4 | 0 | 0 | 10 | 18 |
| 2023 | 2 | 2 | 1 | 0 | 0 | 5 | 8 |
| 2022 | 1 | 1 | 1 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-94606 | authentik: MFA Bypass via State Confusion / Parameter Injection in AuthenticatorEmailStagegoauthentik · authentik | High8.9 |
| CVE-2026-94609 | authentik: Privilege Escalation to Superuser via Group Hierarchygoauthentik · authentik | High8.8 |
| CVE-2026-94611 | authentik: Stored credentials are readable with view permission alonegoauthentik · authentik | High8.1 |
| CVE-2026-94612 | authentik: Authentication bypass via assertion confusion in SAML sourcesgoauthentik · authentik | High7.4 |
| CVE-2026-94613 | authentik: Denial of Service via Document Type Declarations in SAML Messagesgoauthentik · authentik | High7.5 |
| CVE-2026-57580 | authentik: Account Takeover via SAML NameID Comment Truncationgoauthentik · authentik | Critical9.4 |
| CVE-2026-55106 | authentik: Unauthenticated LDAP directory data disclosuregoauthentik · authentik | Medium5.3 |
| CVE-2026-61574 | authentik RAC: access any endpoint via an unrelated applicationgoauthentik · authentik | High8.8 |
| CVE-2026-54730 | authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageViewgoauthentik · authentik | High8.6 |
| CVE-2026-49448 | authentik: SourceStage bypass via empty POSTgoauthentik · authentik | Critical9.8 |
| CVE-2026-49443 | authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the APIgoauthentik · authentik | High8.8 |
| CVE-2026-47201 | authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated usergoauthentik · authentik | High8.5 |
| CVE-2026-42849 | authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeovergoauthentik · authentik | Critical9.3 |
| CVE-2026-41569 | authentik: WS-Federation wreply origin bypass can exfiltrate signed login responses to attacker-controlled endpointsgoauthentik · authentik | Medium6.9 |
| CVE-2026-41577 | authentik: SAML source does not validate Conditions, timing, or audience on assertionsgoauthentik · authentik | Medium6.9 |
| CVE-2026-40172 | authentik: Privilege Escalation via User PATCH: Superuser Group Assignment Bypasses enable_group_superusergoauthentik · authentik | High8.1 |
| CVE-2026-40166 | authentik: Non-admin user can retrieve confidential OAuth client_secret via /api/v3/oauth2/access_tokens/goauthentik · authentik | High7.1 |
| CVE-2026-40165 | authentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier Truncationgoauthentik · authentik | High8.7 |
| CVE-2026-25922 | authentik has a Signature Verification Bypass via SAML Assertion Wrappinggoauthentik · authentik | High8.8 |
| CVE-2026-25748 | authentik has a forward authentication bypass with broken cookiegoauthentik · authentik | High8.6 |
| CVE-2026-25227 | authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpointgoauthentik · authentik | Critical9.1 |
| CVE-2025-64708 | authentik invitation expiry is delayed by at least 5 minutesgoauthentik · authentik | Medium5.8 |
| CVE-2025-64521 | authentik deactivated service accounts can authenticate to OAuthgoauthentik · authentik | Medium4.8 |
| CVE-2025-53942 | authentik has an insufficient check for account active status during OAuth/SAML authenticationgoauthentik · authentik | High7.1 |
| CVE-2025-52553 | authentik has Insufficient Session verification for Remote Access Control endpoint accessgoauthentik · authentik | Medium5.5 |
| CVE-2025-29928 | authentik's deletion of sessions did not revoke sessions when using database session storagegoauthentik · authentik | High8.0 |
| CVE-2024-11623 | Stored XSS in authentikgoauthentik · authentik | Medium4.8 |
| CVE-2024-52287 | authentik performs insufficient validation of OAuth scopesgoauthentik · authentik | Medium6.4 |
| CVE-2024-52289 | authentik has an insecure default configuration for OAuth2 Redirect URIsgoauthentik · authentik | High7.9 |
| CVE-2024-52307 | authentik allows a timing attack due to missing constant time comparison for metrics viewgoauthentik · authentik | Medium6.3 |
| CVE-2024-47077 | authentik cross-provider token validation problemsgoauthentik · authentik | Medium6.5 |
| CVE-2024-47070 | authentik vulnerable to password authentication bypass via X-Forwarded-For HTTP headergoauthentik · authentik | Critical9.1 |
| CVE-2024-42490 | authentik has Insufficient Authorization for several API endpointsgoauthentik · authentik | High7.5 |
| CVE-2024-38371 | Insufficient access control for OAuth2 Device Code flow in authentikgoauthentik · authentik | High8.6 |
| CVE-2024-37905 | Improper Access Control and Incorrect Authorization in github.com/goauthentik/authentikgoauthentik · authentik | High8.8 |
| CVE-2024-23647 | PKCE downgrade attack in Authentikgoauthentik · authentik | Medium6.5 |
| CVE-2024-21637 | XSS in Authentik via JavaScript-URI as Redirect URI and form_post Response Modegoauthentik · authentik | High7.7 |
| CVE-2023-48228 | OAuth2: PKCE can be fully circumventedgoauthentik · authentik | High7.5 |
| CVE-2023-46249 | authentik potential installation takeover when default admin user is deletedgoauthentik · authentik | Critical9.7 |
| CVE-2023-39522 | Username enumeration attack in goauthentikgoauthentik · authentik | Medium5.3 |
| CVE-2023-36456 | Authentik lacks Proxy IP headers validationgoauthentik · authentik | High8.3 |
| CVE-2023-26481 | Insufficient user check in FlowTokens by Email stagegoauthentik · authentik | Critical9.1 |
| CVE-2022-46172 | authentik allows existing authenticated users to create arbitrary accountsgoauthentik · authentik | Medium6.4 |
| CVE-2022-23555 | authentik vulnerable to Improper Authentication via invitation URL token reusegoauthentik · authentik | Critical9.4 |
| CVE-2022-46145 | authentik vulnerable to unauthorized user creation and potential account takeovergoauthentik · authentik | High8.1 |