Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,955All CVEsplus 19,141 rejected
  • 330Last 24 hours3,207 in the last 7 days
  • 17,002Last 30 days1,575 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260013001313

Latest CVEs

13 CVEs, newest first

CVEs, newest first
Title
CVE-2026-112028
light0011 cms Vote VoteController.class.php logic errorPublic exploitlight0011 · cms
Medium6.9
CVE-2026-112027
light0011 cms Uploadify check-exists.php file_exists file information disclosurePublic exploitlight0011 · cms
Medium6.9
CVE-2026-112026
light0011 cms UserModel.class.php sha1 weak password hashPublic exploitlight0011 · cms
Medium6.3
CVE-2026-112025
light0011 cms Captcha Validation UserController.class.php access controlPublic exploitlight0011 · cms
Medium6.9
CVE-2026-86308
light0011 cms Debug Mode config.php information disclosurePublic exploitlight0011 · cms
Medium6.9
CVE-2026-86307
light0011 cms cross-site request forgeryPublic exploitlight0011 · cms
Medium5.3
CVE-2026-86306
light0011 cms Cookie Helper UserModel.class.php improper authenticationPublic exploitlight0011 · cms
Medium6.9
CVE-2026-86305
light0011 cms Upload.class.php upload unrestricted uploadPublic exploitlight0011 · cms
Medium6.9
CVE-2026-85382
light0011 cms Chapter Content Output oneChapter.tpl htmlspecialchars_decode cross site scriptingPublic exploitlight0011 · cms
Medium5.3
CVE-2026-85381
light0011 cms Chapter Controller ChapterController.class.php authorizationPublic exploitlight0011 · cms
Medium6.9
CVE-2026-85380
light0011 cms UEditor controller.php catchimage server-side request forgeryPublic exploitlight0011 · cms
Medium6.9
CVE-2026-85379
light0011 cms Query Builder ChapterController.class.php searchChapter sql injectionPublic exploitlight0011 · cms
Medium6.9
CVE-2026-85378
light0011 cms Chapter Controller ChapterController.class.php _initialize authorizationPublic exploitlight0011 · cms
Medium6.9