Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,113All CVEsplus 19,119 rejected
- 470Last 24 hours2,797 in the last 7 days
- 16,882Last 30 days1,550 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 72 | 76 | 8 | 0 | 158 | 173 |
| 2025 | 1 | 7 | 4 | 0 | 0 | 12 | 15 |
| 2024 | 0 | 0 | 3 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-109572 | Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxyopen-webui · open-webui | High7.2 |
| CVE-2026-109300 | Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embedsopen-webui · open-webui | Medium5.1 |
| CVE-2026-109299 | Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validationopen-webui · open-webui | High7.1 |
| CVE-2026-109298 | Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regexopen-webui · open-webui | High7.1 |
| CVE-2026-109297 | Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rulesopen-webui · open-webui | High7.1 |
| CVE-2026-109296 | Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routesopen-webui · open-webui | Medium5.3 |
| CVE-2026-109295 | Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loopopen-webui · open-webui | Medium5.3 |
| CVE-2026-109294 | Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Imageopen-webui · open-webui | High7.1 |
| CVE-2026-109293 | Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpointopen-webui · open-webui | High7.1 |
| CVE-2026-109292 | Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connectionsopen-webui · open-webui | High7.6 |
| CVE-2026-109291 | Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_urlopen-webui · open-webui | High8.5 |
| CVE-2026-109290 | Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Previewopen-webui · open-webui | High8.4 |
| CVE-2026-109289 | Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocketopen-webui · open-webui | Medium5.3 |
| CVE-2026-109288 | Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Linksopen-webui · open-webui | High7.2 |
| CVE-2026-109287 | Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory IDopen-webui · open-webui | Medium5.3 |
| CVE-2026-109286 | Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModalopen-webui · open-webui | High8.6 |
| CVE-2026-109285 | Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadataopen-webui · open-webui | Low2.3 |
| CVE-2026-109284 | Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpointopen-webui · open-webui | Medium5.3 |
| CVE-2026-109283 | Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchangeopen-webui · open-webui | Medium5.3 |
| CVE-2026-88006 | Open WebUI: Users denied by the OAuth role policy can still sign in via token exchangeopen-webui · open-webui | Medium6.5 |
| CVE-2026-88005 | Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchangeopen-webui · open-webui | Medium6.5 |
| CVE-2026-88002 | Open WebUI: Any authenticated user can hang the server via a cyclic chat message historyopen-webui · open-webui | Medium6.5 |
| CVE-2026-88001 | Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targetsopen-webui · open-webui | Medium5.0 |
| CVE-2026-88000 | Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat treeopen-webui · open-webui | Medium6.5 |
| CVE-2026-87999 | Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetchopen-webui · open-webui | High7.1 |
| CVE-2026-87998 | Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletionopen-webui · open-webui | High7.1 |
| CVE-2026-87997 | Open WebUI: Any authenticated user can inject chats into another user's folder via chat completionsopen-webui · open-webui | Medium4.3 |
| CVE-2026-87996 | Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loaderopen-webui · open-webui | High7.7 |
| CVE-2026-87995 | Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-originopen-webui · open-webui | High8.7 |
| CVE-2026-87994 | Open WebUI: Channel members can overwrite another member's message via the chat completions endpointopen-webui · open-webui | Medium4.3 |
| CVE-2026-87017 | Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backendsopen-webui · open-webui | Medium4.3 |
| CVE-2026-87016 | Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLiteopen-webui · open-webui | High8.1 |
| CVE-2026-87015 | Open WebUI: A user's session cookies are sent to tool servers configured for bearer authenticationopen-webui · open-webui | Medium6.8 |
| CVE-2026-87014 | Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notesopen-webui · open-webui | Medium6.5 |
| CVE-2026-87013 | Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycleopen-webui · open-webui | Medium4.3 |
| CVE-2026-87012 | Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert valueopen-webui · open-webui | Medium4.3 |
| CVE-2026-87011 | Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logoutopen-webui · open-webui | High7.5 |
| CVE-2026-59714 | Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)open-webui · open-webui | High7.1 |
| CVE-2026-70494 | Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolderopen-webui · open-webui | High8.1 |
| CVE-2026-70493 | Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophicallyopen-webui · open-webui | Medium6.5 |
| CVE-2026-70492 | Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messagesopen-webui · open-webui | High8.7 |
| CVE-2026-70491 | Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpointsopen-webui · open-webui | Medium6.5 |
| CVE-2026-70490 | Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role checkopen-webui · open-webui | Medium6.3 |
| CVE-2026-70489 | Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsingopen-webui · open-webui | Medium6.5 |
| CVE-2026-54020 | Open WebUI: DNS Rebinding SSRF Bypassopen-webui · open-webui | Medium6.3 |
| CVE-2026-70488 | Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanupopen-webui · open-webui | Medium4.3 |
| CVE-2026-70487 | Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadataopen-webui · open-webui | Medium5.3 |
| CVE-2026-70486 | Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-originopen-webui · open-webui | High8.2 |
| CVE-2026-70485 | Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLsopen-webui · open-webui | High7.1 |
| CVE-2026-70484 | Open WebUI: Users denied the image-generation permission can still generate images via chat completionsopen-webui · open-webui | Medium4.3 |