Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 403,061All CVEsplus 19,156 rejected
- 712Last 24 hours3,449 in the last 7 days
- 17,226Last 30 days1,545 of them critical
- 1,773Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 25 | 116 | 60 | 0 | 0 | 201 | 249 |
| 2025 | 4 | 11 | 23 | 0 | 0 | 38 | 48 |
| 2024 | 0 | 3 | 7 | 0 | 0 | 10 | 10 |
| Title | ||
|---|---|---|
| CVE-2026-125271 | AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationAWS · aws-api-mcp-server | High8.5 |
| CVE-2026-124035 | Unsafe reflection in Amazon Braket Schemas error mitigation validationAmazon · amazon-braket-schemas | High7.5 |
| CVE-2026-124034 | Path traversal in Amazon Braket SDK local hybrid job input data downloadAWS · amazon-braket-sdk | Medium5.9 |
| CVE-2026-124033 | Relative path traversal in the log export commands in AWS ParallelCluster CLIAWS · aws-parallelcluster | Medium5.9 |
| CVE-2026-119924 | Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name ParserAWS · babelfish-for-postgresql | High7.2 |
| CVE-2026-119923 | Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin ParserAWS · babelfish-for-postgresql | Critical9.3 |
| CVE-2026-122193 | OS command injection in the example SSM documents in Trusted Remote Execution (REX)AWS · trusted-remote-execution | Critical9.3 |
| CVE-2026-119083 | GluonTS arbitrary file write during archive extractionAWS · gluonts | High8.4 |
| CVE-2026-122266 | Improper isolation of shared resources in aws-network-policy-agent in Amazon EKSAWS · aws-network-policy-agent | Medium6.3 |
| CVE-2026-122192 | Guest access to Firecracker process memory after a failed memory discardAWS · firecracker | High7.1 |
| CVE-2026-119084 | Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection ParametersAWS · amazon-redshift-jdbc-driver | Critical9.2 |
| CVE-2026-121652 | Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup renderingAWS · maplibre-gl-js-amplify | Medium4.8 |
| CVE-2026-119922 | Babelfish for PostgreSQL Privilege EscalationAWS · babelfish-for-postgresql | High8.7 |
| CVE-2026-116635 | Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP ServerAWS · aws-serverless-mcp-server | Medium6.9 |
| CVE-2026-120497 | Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC WorkflowsPublic exploitAWS · aidlc-traceability | Medium4.6 |
| CVE-2026-119085 | Template injection in the publishing component of awslabs Virtual Engineering WorkbenchAWS · virtual-engineering-workbench | Critical9.4 |
| CVE-2026-119301 | Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandasAWS · aws-sdk-pandas | Medium5.0 |
| CVE-2026-119117 | Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for JavaAWS · amazon-kinesis-producer | High8.2 |
| CVE-2026-119086 | Missing type validation in xQueueSelectFromSet in FreeRTOS-KernelFreeRTOS · FreeRTOS-Kernel | High8.2 |
| CVE-2026-119148 | Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpointAWS · aws-nitro-enclaves-sdk-c | High8.2 |
| CVE-2026-119116 | Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-cAWS · kmstool-enclave | High8.7 |
| CVE-2026-119115 | Incorrect authorization in issuer resolution in AWS Private CA Connector for KubernetesAWS · aws-privateca-issuer | High8.4 |
| CVE-2026-115415 | Secret masking bypass in the environment tool in Strands Agents Toolsamazon · strands-agents-tools | Medium5.9 |
| CVE-2026-118029 | Unverified ownership of the default Athena query result location in AWS SDK for pandasaws · aws-sdk-pandas | Medium5.9 |
| CVE-2026-115413 | AWS API MCP Server OAuth Token Audience Validation BypassAWS · aws-api-mcp-server | High7.3 |
| CVE-2026-115418 | SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alphaAWS · aws-cdk/aws-redshift-alpha | High7.0 |
| CVE-2026-115845 | Incomplete validation in the run_script Python sandbox in AWS MCP ServerAWS · AWS MCP Server | Medium5.3 |
| CVE-2026-115813 | Server-side request forgery in the model download path in Amazon Web Services Multi Model ServerAWS · multi-model-server | Medium6.9 |
| CVE-2026-115812 | Relative path traversal during model archive extraction in Amazon Web Services Multi Model ServerAWS · multi-model-server | Critical9.3 |
| CVE-2026-115417 | Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqttAWS · aws-c-mqtt | High8.2 |
| CVE-2026-115419 | Unintended disclosure of data element to wrong session in Strands Agents SDK A2A ServerAWS · strands-agents | High8.6 |
| CVE-2026-115414 | OS command injection in the Terraform hook in AWS SAM CLIAWS · aws-sam-cli | High8.4 |
| CVE-2026-115416 | Incorrect authorization checks in Amazon Athena engine version 3 query processingAWS · Amazon Athena | Medium6.3 |
| CVE-2026-112408 | Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()AWS · Amazon SageMaker Python SDK | Critical9.4 |
| CVE-2026-112407 | Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applicationsAWS · CICD-toolchain-for-serverless-applications | High8.7 |
| CVE-2026-112380 | Missing authorization in the WhatsApp channel in Kiro CrewAmazon · Kiro Crew | Critical9.0 |
| CVE-2026-102552 | Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolverFreeRTOS · FreeRTOS-Plus-TCP | High8.2 |
| CVE-2026-102551 | Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handlingFreeRTOS · FreeRTOS-Plus-TCP | Critical9.2 |
| CVE-2026-109588 | Numeric truncation in the MPU buffer authorization check in FreeRTOS-KernelFreeRTOS · FreeRTOS-Kernel | Critical9.3 |
| CVE-2026-109587 | Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-KernelFreeRTOS · FreeRTOS-Kernel | Critical9.3 |
| CVE-2026-110812 | Deserialization of untrusted data in the Gremlin graph-import path in Amazon NeptuneAWS · Amazon Neptune Engine | Critical9.4 |
| CVE-2026-110310 | RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NETAmazon · Amazon.Extensions.S3.Encryption | Medium6.0 |
| CVE-2026-110248 | Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]pyAWS · SageMaker Python SDK | Medium6.0 |
| CVE-2026-108096 | Improper authorization in query resolvers for SQL-backed models in AWS Amplify API CategoryAWS · aws-amplify/graphql-index-transformer | High7.1 |
| CVE-2026-107783 | Insertion of sensitive information into log file in AWS Tools for PowerShellAWS · aws-tools-for-powershell | Medium6.7 |
| CVE-2026-107608 | Improper link resolution in asset bundling output handling in aws-cdk-libAWS · aws-cdk-lib | Medium6.8 |
| CVE-2026-107322 | OS command injection in Amazon Agent Plugins for AWS databases-on-awsaws · databases-on-aws | High8.5 |
| CVE-2026-107332 | Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Codeaws · aws-toolkit-vscode | Medium6.8 |
| CVE-2026-107352 | Missing authorization checks in Amazon Athena engine version 3 request handlingAWS · Amazon Athena | Medium6.3 |
| CVE-2026-106032 | Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent importaws · bedrock-agentcore-starter-toolkit | Medium5.7 |