Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 442Last 24 hours2,721 in the last 7 days
- 16,921Last 30 days1,562 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 6 | 11 | 6 | 0 | 0 | 23 | 23 |
| Title | ||
|---|---|---|
| CVE-2026-119122 | Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Checkunclecode · crawl4ai | Medium6.9 |
| CVE-2026-119121 | Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_forunclecode · crawl4ai | Medium5.3 |
| CVE-2026-119120 | Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_nameunclecode · crawl4ai | High7.7 |
| CVE-2026-119119 | Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fieldsunclecode · crawl4ai | High8.7 |
| CVE-2026-119118 | Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flagsunclecode · crawl4ai | High8.3 |
| CVE-2026-115508 | Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fieldsunclecode · crawl4ai | High7.1 |
| CVE-2026-112363 | Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfounclecode · crawl4ai | Medium6.9 |
| CVE-2026-109239 | Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetchunclecode · crawl4ai | Medium6.9 |
| CVE-2026-109238 | Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seederunclecode · crawl4ai | Critical9.2 |
| CVE-2026-109237 | Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variablesunclecode · crawl4ai | High8.6 |
| CVE-2026-91944 | crawl4ai before 0.9.3 DOM-based XSS via Playground UIunclecode · crawl4ai | Medium5.1 |
| CVE-2026-91943 | Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategyunclecode · crawl4ai | High8.3 |
| CVE-2026-91942 | crawl4ai before 0.9.3 Cross-Site Scripting via innerHTMLunclecode · crawl4ai | Medium5.1 |
| CVE-2026-91941 | Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategyunclecode · crawl4ai | High8.7 |
| CVE-2026-91940 | crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategyunclecode · crawl4ai | High8.7 |
| CVE-2026-57572 | Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_argsunclecode · crawl4ai | Critical10.0 |
| CVE-2026-57573 | Crawl4AI unauthenticated SSRF in Docker streaming crawl endpointunclecode · crawl4ai | High8.6 |
| CVE-2026-57571 | Crawl4AI arbitrary file write via download filename path traversalunclecode · crawl4ai | Critical9.6 |
| CVE-2026-53753 | Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker APIunclecode · crawl4ai | Critical9.8 |
| CVE-2026-53754 | Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)unclecode · crawl4ai | High7.5 |
| CVE-2026-53755 | Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF checkunclecode · crawl4ai | High8.6 |
| CVE-2026-26217 | Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handlingunclecode · Crawl4AI | Critical9.2 |
| CVE-2026-26216 | Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameterunclecode · Crawl4AI | Critical10.0 |