Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,236All CVEsplus 19,120 rejected
- 468Last 24 hours2,788 in the last 7 days
- 16,901Last 30 days1,543 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 22 | 0 | 0 | 22 | 22 |
| Title | ||
|---|---|---|
| CVE-2026-18038 | nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosurenextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16199 | nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorizationnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16124 | nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgerynextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16123 | nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorizationnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16122 | nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorizationnextlevelbuilder · GoClaw | Medium4.8 |
| CVE-2026-16121 | nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorizationnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16120 | nextlevelbuilder GoClaw exec_approval.go extractBin name resolutionnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16119 | nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorizationnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-15627 | nextlevelbuilder GoClaw tool.go handleNavigate information disclosurenextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-15626 | nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversalnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-15625 | nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklistnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-15624 | nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgerynextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-14716 | nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorizationnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-10617 | nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authenticationnextlevelbuilder · GoClaw | Medium6.9 |
| CVE-2026-10616 | nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorizationnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-10583 | nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgerynextlevelbuilder · GoClaw | Medium5.1 |
| CVE-2026-10219 | nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injectionnextlevelbuilder · GoClaw | Medium6.9 |
| CVE-2026-10218 | nextlevelbuilder GoClaw evolution_handlers.go auth improper authorizationnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-10217 | nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges managementnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-7596 | nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scriptingnextlevelbuilder · ui-ux-pro-max-skill | Medium5.3 |
| CVE-2026-7595 | nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injectionnextlevelbuilder · ui-ux-pro-max-skill | Medium5.3 |
| CVE-2026-7505 | nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorizationnextlevelbuilder · GoClaw | Medium6.9 |