Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 401,582All CVEsplus 19,141 rejected
  • 683Last 24 hours2,960 in the last 7 days
  • 17,114Last 30 days1,611 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026039001213
20250010011

Latest CVEs

13 CVEs, newest first

CVEs, newest first
Title
CVE-2026-49838
GoBGP confederation validation panics on empty AS_PATH attributeosrg · gobgp
Medium5.9
CVE-2026-49837
GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundariesosrg · gobgp
Medium5.9
CVE-2026-41643
GoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATEosrg · gobgp
High7.5
CVE-2026-42285
GoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)osrg · gobgp
High7.5
CVE-2026-41642
GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attributeosrg · gobgp
High7.5
CVE-2026-7737
osrg GoBGP BMP Parser bmp.go BMPStatisticsReport.ParseBody out-of-boundsosrg · GoBGP
Medium6.9
CVE-2026-7736
osrg GoBGP mrt.go parseRibEntry integer underflowosrg · GoBGP
Medium6.9
CVE-2026-7735
osrg GoBGP AIGP Attribute bgp.go PathAttributeAigp.DecodeFromBytes buffer overflowosrg · GoBGP
Medium6.9
CVE-2026-7734
osrg GoBGP SRv6 L3 Service prefix_sid.go SRv6L3ServiceAttribute.DecodeFromBytes denial of serviceosrg · GoBGP
Medium6.9
CVE-2026-5124
osrg GoBGP BGP Header bgp.go BGPHeader.DecodeFromBytes access controlosrg · GoBGP
Medium6.3
CVE-2026-5123
osrg GoBGP bgp.go DecodeFromBytes off-by-oneosrg · GoBGP
Medium6.3
CVE-2026-5122
osrg GoBGP BGP OPEN Message bgp.go DecodeFromBytes access controlosrg · GoBGP
Medium6.3
CVE-2025-7464
osrg GoBGP rtr.go SplitRTR out-of-boundsosrg · GoBGP
Medium6.3