Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,247All CVEsplus 18,875 rejected
- 803Last 24 hours3,084 in the last 7 days
- 17,423Last 30 days1,573 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 20 | 15 | 2 | 1 | 38 | 49 |
| 2025 | 1 | 7 | 3 | 0 | 0 | 11 | 11 |
| Title | ||
|---|---|---|
| CVE-2026-119025 | open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windowssindresorhus · open | High7.7 |
| CVE-2026-116686 | Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemasmodelcontextprotocol · python-sdk | Medium6.5 |
| CVE-2026-116685 | Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesmodelcontextprotocol · python-sdk | Medium5.9 |
| CVE-2026-116684 | Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource servermodelcontextprotocol · python-sdk | Medium6.8 |
| CVE-2026-111767 | MCP TypeScript SDK: Experimental tasks were not tied to the session that created themmodelcontextprotocol · typescript-sdk | High8.6 |
| CVE-2026-109527 | Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodiesmodelcontextprotocol · python-sdk | High7.5 |
| CVE-2026-108395 | Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodiesmodelcontextprotocol · io.modelcontextprotocol.sdk:mcp | High7.5 |
| CVE-2026-59951 | MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustionmodelcontextprotocol · python-sdk | Medium6.9 |
| CVE-2026-108714 | MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocketmodelcontextprotocol · kotlin-sdk | High8.7 |
| CVE-2026-104850 | MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP servermodelcontextprotocol · typescript-sdk | High7.5 |
| CVE-2026-104120 | modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgerymodelcontextprotocol · mcp-server-fetch | Medium6.9 |
| CVE-2026-64684 | RMCP: Custom HTTP headers leak to cross-origin redirect targetsmodelcontextprotocol · rust-sdk | Medium6.8 |
| CVE-2026-63127 | RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discoverymodelcontextprotocol · rust-sdk | High8.2 |
| CVE-2026-63128 | RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-servicemodelcontextprotocol · rust-sdk | High7.5 |
| CVE-2026-53937 | MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)modelcontextprotocol · io.modelcontextprotocol:kotlin-sdk | Medium6.2 |
| CVE-2026-53965 | MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of servicemodelcontextprotocol · php-sdk | Medium6.9 |
| CVE-2026-67432 | MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransportmodelcontextprotocol · ruby-sdk | High7.5 |
| CVE-2026-67431 | MCP Ruby SDK: Ruby SSE Session Poisoningmodelcontextprotocol · ruby-sdk | High8.3 |
| CVE-2026-63119 | MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)modelcontextprotocol · ruby-sdk | Medium6.2 |
| CVE-2026-67430 | MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize floodmodelcontextprotocol · ruby-sdk | Medium5.3 |
| CVE-2026-63118 | MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protectionmodelcontextprotocol · ruby-sdk | Medium6.9 |
| CVE-2026-59950 | MCP Python SDK: WebSocket server transport does not support Host/Origin validationmodelcontextprotocol · python-sdk | High7.6 |
| CVE-2026-52870 | MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasksmodelcontextprotocol · python-sdk | High7.6 |
| CVE-2026-52869 | MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principalmodelcontextprotocol · python-sdk | High7.1 |
| CVE-2026-44428 | MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audiencemodelcontextprotocol · registry | Low2.1 |
| CVE-2026-44427 | MCP Registry: Open Redirectmodelcontextprotocol · registry | None0.0 |
| CVE-2026-44429 | MCP Registry: Stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl`modelcontextprotocol · registry | Medium5.1 |
| CVE-2026-44430 | MCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlistmodelcontextprotocol · registry | Medium6.3 |
| CVE-2026-45781 | MCP Registry: OCI ownership validation fails open on upstream rate limits, allowing attacker-controlled package claimsmodelcontextprotocol · registry | Low3.5 |
| CVE-2026-42559 | RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transportmodelcontextprotocol · rust-sdk | High8.8 |
| CVE-2026-35568 | MCP Java-SDK has a DNS Rebinding Vulnerabilitymodelcontextprotocol · java-sdk | High7.6 |
| CVE-2026-34742 | Model Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhostmodelcontextprotocol · go-sdk | High7.6 |
| CVE-2026-34237 | MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)modelcontextprotocol · java-sdk | Medium6.1 |
| CVE-2026-33946 | MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replaymodelcontextprotocol · ruby-sdk | High8.2 |
| CVE-2026-33252 | MCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrionmodelcontextprotocol · go-sdk | High7.1 |
| CVE-2026-27896 | MCP Go SDK Vulnerable to Improper Handling of Case Sensitivitymodelcontextprotocol · go-sdk | High7.0 |
| CVE-2026-27735 | mcp-server-git : Path traversal in git_add allows staging files outside repository boundariesmodelcontextprotocol · servers | Medium6.4 |
| CVE-2026-25536 | @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reusemodelcontextprotocol · typescript-sdk | High7.1 |
| CVE-2025-68145 | mcp-server-git has missing path validation when using --repository flagmodelcontextprotocol · servers | Medium6.4 |
| CVE-2025-68144 | mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local filesmodelcontextprotocol · servers | Medium6.3 |
| CVE-2025-68143 | mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locationsmodelcontextprotocol · servers | Medium6.5 |
| CVE-2025-66416 | DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhostmodelcontextprotocol · python-sdk | High7.6 |
| CVE-2025-66414 | DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhostmodelcontextprotocol · typescript-sdk | High7.6 |
| CVE-2025-58444 | MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Servermodelcontextprotocol · inspector | High8.6 |
| CVE-2025-53366 | MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Servicemodelcontextprotocol · python-sdk | High8.7 |
| CVE-2025-53365 | MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Servicemodelcontextprotocol · python-sdk | High8.7 |
| CVE-2025-53109 | Model Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink Handlingmodelcontextprotocol · servers | High7.3 |
| CVE-2025-53110 | Model Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path Prefixmodelcontextprotocol · servers | High7.3 |
| CVE-2025-49596 | MCP Inspector proxy server lacks authentication between the Inspector client and proxymodelcontextprotocol · inspector | Critical9.4 |