Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 404,598All CVEsplus 19,156 rejected
- 2,041Last 24 hours4,630 in the last 7 days
- 18,758Last 30 days1,591 of them critical
- 1,773Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 17 | 7 | 0 | 0 | 28 | 283 |
| 2025 | 12 | 43 | 30 | 2 | 0 | 87 | 255 |
| 2024 | 13 | 30 | 10 | 0 | 0 | 53 | 168 |
| 2023 | 4 | 15 | 9 | 1 | 0 | 29 | 115 |
| 2022 | 1 | 14 | 5 | 0 | 0 | 20 | 86 |
| 2021 | 2 | 2 | 3 | 0 | 0 | 7 | 66 |
| 2020 | 8 | 20 | 25 | 2 | 0 | 55 | 59 |
| 2019 | 0 | 1 | 2 | 1 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-13599 | ABB Ability Edgenius | Missing Authentication in Edgenius AuthDBABB · Ability Edgenius | Medium5.8 |
| CVE-2026-17525 | My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversionABB · My Control System | Medium5.1 |
| CVE-2026-15953 | Path Traversal During Project Archive ImportABB · Protection and control IED manager (PCM600) | Medium5.6 |
| CVE-2026-15952 | Improper Permission Assignment in Scheduler ServiceABB · Protection and control IED manager (PCM600) | High7.1 |
| CVE-2026-19438 | Mint Workbench I Path traversal VulnerabilityABB · Mint Workbench I | High8.2 |
| CVE-2023-5778 | Missing Length CheckABB · Freelance Controller DCP | Critical9.2 |
| CVE-2026-79679 | Use of Weak CredentialsB&R Industrial Automation GmbH · mapp Services | High7.0 |
| CVE-2026-12705 | Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update ToolABB · KNX Update Tool (ABB) | Medium5.9 |
| CVE-2026-6901 | Untrusted Search PathB&R Industrial Automation GmbH · APROL | High8.4 |
| CVE-2026-6900 | Improper Certificate ValidationB&R Industrial Automation GmbH · APROL | Critical9.1 |
| CVE-2025-13162 | Advant Master Online Builder DLL vulnerabilityABB · Control Builder A | Medium4.1 |
| CVE-2025-7064 | Freelance Security Lock – Access to Windows OSABB · Freelance | Medium5.6 |
| CVE-2025-14774 | Communication analysis between the Card Reader and TP2CardReaderService daemonABB · T-MAC Plus | High7.2 |
| CVE-2025-14773 | Stored Cross-Site Scripting in ABB T-MAC Plus web applicationABB · T-MAC Plus | High7.2 |
| CVE-2025-14772 | Broken Access Control in ABB T-MAC Plus web applicationABB · T-MAC Plus | High7.3 |
| CVE-2025-14771 | File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web SiteABB · T-MAC Plus | High7.3 |
| CVE-2025-11482 | Allocation of Resources Without Limits or Throttling in the OPC-UA ServerB&R Industrial Automation GmbH · PPT30 Operating System | High8.7 |
| CVE-2025-3756 | Denial of Service Vulnerabilities in System 800xA, Symphony® Plus IEC 61850ABB · AC800M (System 800xA) | High7.1 |
| CVE-2025-13779 | Configuration Data SpillABB · AWIN GW100 rev.2 | High7.2 |
| CVE-2025-13778 | Device Reboot ControlABB · AWIN GW100 rev.2 | High7.1 |
| CVE-2025-13777 | Authentication Bypass due to Improper Session ValidationABB · AWIN GW100 rev.2 | High7.2 |
| CVE-2026-0936 | Insertion of Sensitive Information into LogfileB&R Industrial Automation GmbH · Process Visualization Interface (PVI) | Medium5.1 |
| CVE-2025-11044 | Vulnerability on Automation Runtime my cause DoS ConditionsB&R Industrial Automation GmbH · Automation Runtime | High8.9 |
| CVE-2025-11043 | Improper Server Certificate Validation in Automation StudioB&R Industrial Automation GmbH · B&R Automation Studio | Critical9.1 |
| CVE-2025-14510 | ABB Ability OPTIMAX Authentication Bypass in Single-Sign OnABB · ABB Ability OPTIMAX | Critical9.2 |
| CVE-2025-4677 | Idle session timeout is not configured for multiple open portsABB · WebPro SNMP Card PowerValue | High7.1 |
| CVE-2025-4676 | Authentication bypass by brute forcing Authentication HeadersABB · WebPro SNMP Card PowerValue | High8.4 |
| CVE-2025-4675 | Improper implementation of Modbus protocol leading to DOS attackABB · WebPro SNMP Card PowerValue | High7.1 |
| CVE-2025-12143 | Stack Memory Corruption VulnerabilityABB · Terra AC wallbox | Medium6.9 |
| CVE-2025-10571 | ABB Ability Edgenius Authentication BypassABB · ABB Ability Edgenius | Critical9.4 |
| CVE-2025-12142 | BSS(Block Started by Symbol) Memory Corruption VulnerabilityABB · Terra AC wallbox | Medium6.9 |
| CVE-2025-5517 | Heap Memory Corruption VulnerabilityABB · Terra AC wallbox (UL40/80A) | Medium6.1 |
| CVE-2025-3465 | Path Traversal VulnerabilityABB · CoreSense™ HM | High8.2 |
| CVE-2025-9574 | Missing Authentication VulnerabilityABB · ALS-mini-s4 IP | Critical9.9 |
| CVE-2025-11498 | CSV Formula Injection VulnerabilityB&R Industrial Automation GmbH · Automation Runtime | Medium5.3 |
| CVE-2025-9970 | Application credential stored in clear text in memoryABB · MConfig | Medium5.7 |
| CVE-2025-3449 | Weak Session Token used in Automation Runtime SDMB&R Industrial Automation GmbH · Automation Runtime | Low2.3 |
| CVE-2025-3448 | XSS on SDMB&R Industrial Automation GmbH · Automation Runtime | Medium5.1 |
| CVE-2025-3450 | Automation Runtime SDM requests may impact systemB&R Industrial Automation · Automation Runtime | Critical9.3 |
| CVE-2021-22291 | EIBPORT Reflected XSSABB · EIBPORT V3 KNX | High8.5 |
| CVE-2025-10504 | Heap Memory Corruption VulnerabilityABB · Terra AC wallbox | Medium6.9 |
| CVE-2025-10207 | Authenticated File Disclosure/DeleteABB · FLXEON | High7.5 |
| CVE-2024-48851 | Remote Code ExecutionABB · FLXEON | High7.5 |
| CVE-2025-10205 | Predictable Salt and Weak Hashing AlgorithmABB · FLXEON | High8.7 |
| CVE-2024-48842 | Hardcoded passwordsABB · FLXEON | High7.3 |
| CVE-2025-8754 | ABB AbilityTM zenon Remote Transport VulnerabilityABB · ABB AbilityTM zenon | High8.7 |
| CVE-2025-7679 | Session ID Basic Auth BypassABB · Aspect | Critical9.2 |
| CVE-2025-7677 | DOS attack possibleABB · Aspect | High8.2 |
| CVE-2025-53187 | Unauthenticated RCEABB · ASPECT | Critical9.3 |
| CVE-2025-7745 | Modbus TCP buffer overreadABB · AC500 V2 | Medium6.9 |