Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,638All CVEsplus 19,141 rejected
  • 668Last 24 hours2,951 in the last 7 days
  • 17,123Last 30 days1,606 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026914001414

Latest CVEs

14 CVEs, newest first

CVEs, newest first
Title
CVE-2026-102782
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0ordasoft.com · OrdaSoft Simple Membership extension for Joomla
Critical9.3
CVE-2026-102781
Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6ordasoft.com · Touch Slider extension for Joomla
Medium6.9
CVE-2026-102428
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16ordasoft.com · OrdaSoft Joomla CCK
Critical9.3
CVE-2026-102427
Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16ordasoft.com · OrdaSoft Joomla CCK
Critical10.0
CVE-2026-101111
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6ordasoft.com · Book Library (Free) extension for Joomla
Medium5.3
CVE-2026-101109
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8ordasoft.com · Vehicle Manager (Free) extension for Joomla
Medium5.3
CVE-2026-101110
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6ordasoft.com · Book Library (Free) extension for Joomla
Critical9.3
CVE-2026-100753
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9ordasoft.com · Real Estate Manager (Free) extension for Joomla
Medium5.3
CVE-2026-100752
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9ordasoft.com · Real Estate Manager (Free) extension for Joomla
Critical9.3
CVE-2026-101108
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8ordasoft.com · Vehicle Manager (Free) extension for Joomla
Critical9.3
CVE-2026-88857
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7OrdaSoft.com · OrdaSoft Joomla Gallery free extension for Joomla
Critical9.4
CVE-2026-88854
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7OrdaSoft.com · OrdaSoft Joomla Gallery free extension for Joomla
Critical9.3
CVE-2026-88855
Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7OrdaSoft.com · OrdaSoft Joomla Gallery free extension for Joomla
High8.6
CVE-2026-88856
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7OrdaSoft.com · OrdaSoft Joomla Gallery free extension for Joomla
Critical9.4