Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,791All CVEsplus 19,141 rejected
- 649Last 24 hours3,086 in the last 7 days
- 17,141Last 30 days1,603 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 17 | 14 | 14 | 3 | 0 | 48 | 51 |
| 2025 | 0 | 2 | 0 | 1 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-100395 | LXC: lxc-copy host-context hostname update follows symlinklxc · lxc | Medium6.8 |
| CVE-2026-115378 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pulllxc · incus | Medium6.9 |
| CVE-2026-115377 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Streamlxc · incus | Critical9.4 |
| CVE-2026-115376 | Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copylxc · incus | High8.3 |
| CVE-2026-115375 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumeslxc · incus | Critical9.4 |
| CVE-2026-115374 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLslxc · incus | High7.1 |
| CVE-2026-115373 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}lxc · incus | High7.0 |
| CVE-2026-115372 | Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_optionslxc · incus | Critical9.0 |
| CVE-2026-115371 | LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpointslxc · incus | High7.1 |
| CVE-2026-115370 | Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refreshlxc · incus | Medium5.3 |
| CVE-2026-52727 | lxc-ci: Pacman keyring stored in archlinux image with a private keylxc · lxc-ci | High7.2 |
| CVE-2026-63343 | Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as rootlxc · incus | Critical9.9 |
| CVE-2026-63125 | Incus vulnerable to root RCE via image backup.yaml symlinklxc · incus | Critical9.9 |
| CVE-2026-62941 | Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config mergelxc · incus | Critical9.9 |
| CVE-2026-62940 | Incus has a project restriction bypass via instance migration config overridelxc · incus | Critical9.9 |
| CVE-2026-62867 | Incus has an argument injection in storage volume block.create_options that leads to arbitrary command executionlxc · incus | Critical9.9 |
| CVE-2026-62313 | Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`lxc · incus | Medium4.3 |
| CVE-2026-55622 | Incus has a project restriction bypass in instance copy across projectslxc · incus | High7.7 |
| CVE-2026-55621 | Incus has a project restriction bypass for custom volume copy across projectslxc · incus | High7.7 |
| CVE-2026-48769 | Incus has an arbitrary file write on its client due to trusted image hashlxc · incus | Critical9.9 |
| CVE-2026-48755 | Incus has an argument injection in backup compression algorithm leading to AFW and ACElxc · incus | Critical9.9 |
| CVE-2026-48754 | Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}lxc · incus | Low2.1 |
| CVE-2026-48753 | Incus has an arbitrary file write via path traversal in S3 multipart uploadlxc · incus | Critical9.9 |
| CVE-2026-48752 | Incus has arbitrary file read+write on host via templates/ symlink in malicious imagelxc · incus | Critical9.9 |
| CVE-2026-48751 | Incus has a restricted project bypass leading to arbitrary command executionlxc · incus | Critical9.9 |
| CVE-2026-48750 | Incus has an arbitrary file write on host via `exec-output` symlink in crafted imagelxc · incus | Critical9.9 |
| CVE-2026-48749 | Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious imagelxc · incus | Critical9.9 |
| CVE-2026-47753 | Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted)lxc · incus | Medium4.4 |
| CVE-2026-48756 | Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)lxc · incus | Low2.1 |
| CVE-2026-41685 | Incus: Unbounded binary import disk exhaustionlxc · incus | Medium4.3 |
| CVE-2026-41684 | Incus: Nil Dereferences on Restore via Malformed YAMLlxc · incus | Medium6.5 |
| CVE-2026-41648 | Incus: Unbounded YAML Metadata Decode via Parsinglxc · incus | Medium5.3 |
| CVE-2026-41647 | Incus: Nil-Pointer Dereference via S3 Bucket Importlxc · incus | Medium6.5 |
| CVE-2026-40251 | Incus out-of-bounds panic in snapshot metadata handling allows denial of servicelxc · incus | High7.1 |
| CVE-2026-40243 | Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonationlxc · incus | Low2.3 |
| CVE-2026-40197 | Incus nil-pointer dereference in custom volume import allows denial of servicelxc · incus | High7.1 |
| CVE-2026-40195 | Incus nil-pointer dereference in storage bucket import allows denial of servicelxc · incus | High7.1 |
| CVE-2026-39402 | lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletionlxc · lxc | Medium4.3 |
| CVE-2026-35527 | Incus blind SSRF via image import preflight HEAD requestlxc · incus | Medium5.3 |
| CVE-2026-33945 | Abitrary file write through systemd-creds optionlxc · incus | Critical10.0 |
| CVE-2026-33898 | Local Incus UI web server vulnerable to nuthentication bypasslxc · incus | High8.8 |
| CVE-2026-33897 | Incus vulnerable to arbitrary file read and write through pongo templateslxc · incus | Critical10.0 |
| CVE-2026-33743 | Incus vulnerable to denial of source through crafted bucket backup filelxc · incus | Medium6.5 |
| CVE-2026-33711 | Incus vulnerable to local privilege escalation through VM screenshot pathlxc · incus | Medium4.7 |
| CVE-2026-33542 | Incus does not verify combined fingerprint when downloading images from simplestreams serverslxc · incus | Medium5.7 |
| CVE-2026-32606 | IncusOS has a LUKS encryption bypass due to insufficient TPM policylxc · incus-os | High7.7 |
| CVE-2026-23954 | Incus container image templating arbitrary host file read and writelxc · incus | High8.7 |
| CVE-2026-23953 | Incus container environment configuration newline injectionlxc · incus | High8.7 |
| CVE-2025-64507 | Incus vulnerable to local privilege escalation through custom storage volumeslxc · incus | High8.6 |
| CVE-2025-52890 | Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLslxc · incus | High8.1 |