Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,094All CVEsplus 19,119 rejected
- 503Last 24 hours2,830 in the last 7 days
- 16,881Last 30 days1,552 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 6 | 9 | 13 | 1 | 0 | 29 | 37 |
| 2025 | 0 | 0 | 4 | 0 | 0 | 4 | 8 |
| 2024 | 1 | 0 | 0 | 0 | 0 | 1 | 4 |
| 2023 | 1 | 2 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-84301 | FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requestslabring · FastGPT | Medium6.3 |
| CVE-2026-68929 | FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorizationlabring · FastGPT | Critical9.3 |
| CVE-2026-61643 | FastGPT: workflow runtime can execute another user's private HTTP toolsetlabring · FastGPT | Medium5.9 |
| CVE-2026-50562 | FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflowslabring · FastGPT | Critical9.3 |
| CVE-2026-61646 | FastGPT: Shared axios SSRF guard validates only the initial URL before following redirectslabring · FastGPT | Medium6.3 |
| CVE-2026-61644 | FastGPT: /api/core/chat/record/getCollectionQuote can disclose cross-tenant dataset text due to an unbound initialId lookuplabring · FastGPT | High7.7 |
| CVE-2026-61684 | FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token')labring · FastGPT | High8.8 |
| CVE-2026-54602 | FastGPT: Cross-team LLM request/response disclosure (IDOR) via /api/core/ai/record/getRecordlabring · FastGPT | High7.1 |
| CVE-2026-54607 | FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard)labring · FastGPT | High7.7 |
| CVE-2026-55418 | FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure)labring · FastGPT | High8.6 |
| CVE-2026-54601 | FastGPT: reTrainingCollection allows server-owned datasetId override causing cross-tenant authorization confusionlabring · FastGPT | Medium6.3 |
| CVE-2026-44287 | FastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s*\(/ is bypassablelabring · FastGPT | Medium6.3 |
| CVE-2026-44285 | FastGPT: SSRF Protection Bypass via `externalFile` in Dataset Preview APIlabring · FastGPT | High7.7 |
| CVE-2026-44286 | FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validationlabring · FastGPT | Low2.3 |
| CVE-2026-44284 | FastGPT: Stored MCP tool URL SSRF in FastGPT workflow executionlabring · FastGPT | Medium6.3 |
| CVE-2026-42345 | FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dotlabring · FastGPT | High7.7 |
| CVE-2026-42344 | FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpointslabring · FastGPT | Medium6.3 |
| CVE-2026-42343 | FastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustionlabring · FastGPT | Medium6.3 |
| CVE-2026-42302 | FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandboxlabring · FastGPT | Critical9.8 |
| CVE-2026-40352 | FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeoverlabring · FastGPT | High8.8 |
| CVE-2026-40351 | FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypasslabring · FastGPT | Critical9.8 |
| CVE-2026-40252 | Broken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPTlabring · FastGPT | Medium5.3 |
| CVE-2026-40100 | FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP defaultlabring · FastGPT | Medium5.3 |
| CVE-2026-34162 | FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theftlabring · FastGPT | Critical10.0 |
| CVE-2026-34163 | Server-Side Request Forgery via MCP Tools Endpoint in FastGPTlabring · FastGPT | High7.7 |
| CVE-2026-33075 | FastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.ymllabring · FastGPT | Critical9.4 |
| CVE-2026-32128 | FastGPT Python Sandbox Bypass of File-Write Restrictionlabring · FastGPT | Medium6.3 |
| CVE-2026-26075 | Cross-Site Request Forgery (CSRF) in FastGPTlabring · FastGPT | Medium6.9 |
| CVE-2026-26003 | FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attacklabring · FastGPT | Medium6.9 |
| CVE-2025-62612 | FastGPT File Reading Node SSRF Vulnerabilitylabring · FastGPT | Medium6.9 |
| CVE-2025-52552 | FastGPT LastRoute Parameter on Login Page Vulnerable to Open Redirect and DOM-based XSSlabring · FastGPT | Medium5.5 |
| CVE-2025-49131 | FastGPT Sandbox Vulnerable to Sandbox Bypasslabring · FastGPT | Medium6.3 |
| CVE-2025-27600 | FastGPT SSRFlabring · FastGPT | Medium6.9 |
| CVE-2023-50253 | laf logs leaklabring · laf | Critical9.7 |
| CVE-2023-48225 | Laf env causes sensitive information disclosurelabring · laf | High8.9 |
| CVE-2023-36815 | Sealos billing system permission control defectlabring · sealos | High7.3 |
| CVE-2023-33190 | Improperly configured permissions in Sealoslabring · sealos | Critical10.0 |