Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,452All CVEsplus 18,890 rejected
- 361Last 24 hours2,971 in the last 7 days
- 17,371Last 30 days1,592 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 28 | 290 | 290 | 64 | 0 | 672 | 672 |
| Title | ||
|---|---|---|
| CVE-2026-110689 | OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanismOpenClaw · ClawScan | Medium4.8 |
| CVE-2026-101884 | OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment OverrideOpenClaw · OpenClaw Windows Node | High7.7 |
| CVE-2026-101883 | OpenClaw Windows Node through 2026.9.4 SSRF via canvas.presentOpenClaw · OpenClaw Windows Node | Medium5.3 |
| CVE-2026-101882 | OpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.setOpenClaw · OpenClaw Windows Node | High8.7 |
| CVE-2026-101881 | OpenClaw Windows Node before 2026.7.1 Denial of ServiceOpenClaw · OpenClaw Windows Node | High7.1 |
| CVE-2026-101880 | OpenClaw Windows Node before 2026.7.1 Authorization BypassOpenClaw · OpenClaw Windows Node | High8.7 |
| CVE-2026-101879 | OpenClaw Windows Node before 2026.7.1-3 Missing AuthorizationOpenClaw · OpenClaw Windows Node | High7.1 |
| CVE-2026-102807 | OpenClaw before 2026.9.4 Authorization Bypass via MCP App Standalone TicketOpenClaw · OpenClaw | Medium6.0 |
| CVE-2026-102806 | OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media PipelinesOpenClaw · OpenClaw | Medium6.0 |
| CVE-2026-100604 | ClawHub Authentication Bypass via Former Publisher Skill Controlopenclaw · clawhub | Medium5.3 |
| CVE-2026-100603 | ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reportsopenclaw · clawhub | High8.7 |
| CVE-2026-100602 | ClawHub Changelog Preview Information Disclosure via Authorization Bypassopenclaw · clawhub | High7.1 |
| CVE-2026-100601 | ClawHub SSRF via Unchecked DNS Resolution in Profile Imageopenclaw · clawhub | Medium6.9 |
| CVE-2026-100600 | ClawHub before 8c2de6c506 Quota Exhaustion via Anonymous APIopenclaw · clawhub | Medium6.9 |
| CVE-2026-100599 | OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chromeOpenClaw · OpenClaw | High8.7 |
| CVE-2026-100598 | OpenClaw before 2026.7.1 Approval Binding Logic ErrorOpenClaw · OpenClaw | High7.5 |
| CVE-2026-100597 | OpenClaw before 2026.7.1 Path Traversal via Filesystem RaceOpenClaw · OpenClaw | High8.8 |
| CVE-2026-100596 | OpenClaw before 2026.7.1 Authorization Bypass via MCP ConfigurationOpenClaw · OpenClaw | High8.7 |
| CVE-2026-100595 | OpenClaw before 2026.7.1 Authorization Bypass via diagnosticsOpenClaw · OpenClaw | High7.1 |
| CVE-2026-100594 | OpenClaw before 2026.7.1 Authorization Bypass via trajectory exportOpenClaw · OpenClaw | High7.1 |
| CVE-2026-100593 | OpenClaw before 2026.7.1 Authentication Bypass via activationOpenClaw · OpenClaw | Medium5.3 |
| CVE-2026-100592 | OpenClaw before 2026.7.1 Authentication Bypass via Memory DreamingOpenClaw · OpenClaw | Medium5.3 |
| CVE-2026-100591 | OpenClaw before 2026.7.1 Authentication Bypass via Active MemoryOpenClaw · OpenClaw | Medium5.3 |
| CVE-2026-100590 | OpenClaw before 2026.7.1 Authorization Bypass via voice setOpenClaw · OpenClaw | Medium5.3 |
| CVE-2026-100589 | OpenClaw before 2026.7.1 Sandbox Bypass via Browser NodeOpenClaw · OpenClaw | High8.7 |
| CVE-2026-100588 | OpenClaw before 2026.7.1 Authentication Bypass via node.invokeOpenClaw · OpenClaw | High8.7 |
| CVE-2026-100587 | OpenClaw before 2026.7.1 Authorization Bypass via Codex InstallOpenClaw · OpenClaw | High8.7 |
| CVE-2026-100586 | OpenClaw Codex before 2026.7.1 Authorization Bypass via BindOpenClaw · OpenClaw | High8.7 |
| CVE-2026-100585 | OpenClaw before 2026.7.1 Authentication Bypass via MCP ChannelOpenClaw · OpenClaw | High8.6 |
| CVE-2026-100584 | OpenClaw before 2026.7.1 Allowlist Bypass via Workspace ShadowsOpenClaw · OpenClaw | Medium5.4 |
| CVE-2026-100583 | OpenClaw Discord before 2026.7.1 Authorization Bypassopenclaw · discord | Medium5.3 |
| CVE-2026-100582 | OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypassopenclaw · msteams | High7.1 |
| CVE-2026-100581 | OpenClaw iOS before 2026.8.11 Credential Storage via Share ExtensionOpenClaw · OpenClaw | Medium6.8 |
| CVE-2026-100580 | OpenClaw before 2026.7.1 Remote Code Execution via cron toolOpenClaw · OpenClaw | High8.7 |
| CVE-2026-100579 | OpenClaw before 2026.7.1 Authentication Bypass via Spoofed RequesterOpenClaw · OpenClaw | High7.2 |
| CVE-2026-100578 | OpenClaw before 2026.7.1 Authorization Bypass via chat.sendOpenClaw · OpenClaw | High7.2 |
| CVE-2026-100577 | OpenClaw before 2026.8.1 Server-Side Request Forgery via Video AssetOpenClaw · OpenClaw | Medium5.3 |
| CVE-2026-100576 | OpenClaw before 2026.8.1 SSRF via Browser Wait PredicatesOpenClaw · OpenClaw | Medium5.3 |
| CVE-2026-100575 | OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DMopenclaw · slack | High8.7 |
| CVE-2026-100574 | OpenClaw before 2026.8.1 SSRF via Trusted-Host DNSOpenClaw · OpenClaw | High8.2 |
| CVE-2026-100573 | OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP LoopbackOpenClaw · OpenClaw | Medium4.8 |
| CVE-2026-100572 | OpenClaw before 2026.8.1 Denial of Service via Rate LimitOpenClaw · OpenClaw | Medium6.9 |
| CVE-2026-100571 | OpenClaw before 2026.8.1 SMS Webhook Rate Limit BypassOpenClaw · OpenClaw | Medium6.9 |
| CVE-2026-100570 | OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGSOpenClaw · OpenClaw | High8.5 |
| CVE-2026-100569 | OpenClaw before 2026.8.1 Credential Exposure via Endpoint OverrideOpenClaw · OpenClaw | Medium6.8 |
| CVE-2026-100568 | OpenClaw before 2026.8.1 Unauthorized Command Job AccessOpenClaw · OpenClaw | High8.7 |
| CVE-2026-100567 | OpenClaw before 2026.8.1 DNS Rebinding via CDP HostnameOpenClaw · OpenClaw | High8.9 |
| CVE-2026-100566 | OpenClaw LINE before 2026.8.1 Access Control Inheritanceopenclaw · line | Medium6.9 |
| CVE-2026-100564 | OpenClaw before 2026.8.1 CSV Formula Injection via Attendance ExportOpenClaw · OpenClaw | Medium5.3 |
| CVE-2026-100563 | OpenClaw before 2026.8.1 CSV Formula Injection via Session LabelsOpenClaw · OpenClaw | Medium5.3 |