Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 400,985All CVEsplus 19,118 rejected
  • 417Last 24 hours2,843 in the last 7 days
  • 16,805Last 30 days1,543 of them critical
  • 1,768Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026583001616

Latest CVEs

16 CVEs, newest first

CVEs, newest first
Title
CVE-2026-110868
Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasourcesrenovatebot · renovate
High8.4
CVE-2026-110867
Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Presetrenovatebot · renovate
Critical9.0
CVE-2026-110866
Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Requestrenovatebot · renovate
Medium5.3
CVE-2026-110865
Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presetsrenovatebot · renovate
High7.1
CVE-2026-88889
Renovate before 44.14.7 Command Injection via distributionTyperenovatebot · renovate
High8.5
CVE-2026-88888
Renovate before 44.14.7 Command Injection via Mix organizationrenovatebot · renovate
High7.3
CVE-2026-88887
Renovate before 44.11.2 Credential Exfiltration via Link Headerrenovatebot · renovate
Critical9.2
CVE-2026-88886
Renovate before 44.14.7 Command Injection via gradle-wrapperrenovatebot · renovate
High8.5
CVE-2026-88885
Renovate before 44.14.7 Command Injection via depNamerenovatebot · renovate
High7.3
CVE-2026-88884
Renovate before 44.3.1 Authentication Bypass via Digest Updatesrenovatebot · renovate
Medium6.9
CVE-2026-88883
Renovate before 44.14.4 TLS Private Key Log Sanitisationrenovatebot · renovate
High8.3
CVE-2026-88882
Renovate before 44.11.2 Credential Exfiltration via Link Headerrenovatebot · renovate
Critical9.2
CVE-2026-88881
Renovate before 44.11.3 Credential Exfiltration via Link Headerrenovatebot · renovate
Critical9.2
CVE-2026-88880
Renovate before 44.11.3 Credential Exfiltration via Link Headerrenovatebot · renovate
Critical9.2
CVE-2026-76228
Renovate before 42.68.5 Remote Code Execution via Gradle Wrapperrenovatebot · renovate
High8.4
CVE-2026-76227
Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposurerenovatebot · renovate
Medium6.8