Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,736All CVEsplus 19,141 rejected
- 661Last 24 hours3,036 in the last 7 days
- 17,204Last 30 days1,612 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 7 | 1 | 0 | 0 | 8 | 8 |
| Title | ||
|---|---|---|
| CVE-2026-52831 | Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCEnuclio · nuclio | High8.0 |
| CVE-2026-79756 | Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platformnuclio · nuclio | High8.7 |
| CVE-2026-79755 | Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)nuclio · nuclio | High8.0 |
| CVE-2026-79754 | Nuclio: Kaniko build tempDir command injectionnuclio · nuclio | High7.1 |
| CVE-2026-52833 | Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCEnuclio · nuclio | High8.0 |
| CVE-2026-52832 | Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard containernuclio · nuclio | Medium4.9 |
| CVE-2026-45730 | Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any projectnuclio · nuclio | High8.3 |
| CVE-2026-29042 | Nuclio Shell Runtime Command Injection Leading to Privilege Escalationnuclio · nuclio | High8.9 |