Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,770All CVEsplus 19,170 rejected
- 393Last 24 hours4,881 in the last 7 days
- 16,929Last 30 days1,491 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 18 | 34 | 35 | 2 | 0 | 89 | 117 |
| 2025 | 4 | 14 | 8 | 0 | 0 | 26 | 28 |
| 2024 | 2 | 0 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-112165 | Disabled TLS Certificate Validation Enables MITM Attackslaservideo · lasergest | Medium6.9 |
| CVE-2026-112164 | Hardcoded AES Key Enables Credential Disclosurelaservideo · lasergest | Medium6.6 |
| CVE-2026-103906 | Disabled TLS Certificate Validation Enables MITM Attacksam_automatic_machines · am_club | High7.8 |
| CVE-2026-112171 | SQL injection vulnerability in Magistra softwareGALENO SISTEMI · MAGISTRA | Medium4.4 |
| CVE-2026-112170 | Improper verification of downloaded upgradesGALENO SISTEMI · MAGISTRA | Medium6.3 |
| CVE-2026-112169 | Undocumented backdoor allows authentication bypass in Magistra softwareGALENO SISTEMI · MAGISTRA | Medium6.1 |
| CVE-2026-112168 | Multiple embedded secrets and weak algorithms in MagistraGALENO SISTEMI · MAGISTRA | Medium6.0 |
| CVE-2026-118798 | Multiple sensitive authentication data exposedCompuGroup Medical · Wingesfar | Medium4.4 |
| CVE-2026-118795 | AIS stores authorization state in locally modifiable databasesCompuGroup Medical · Infantia | Medium5.9 |
| CVE-2026-118792 | Default ODBC credentialsCompuGroup Medical · Wingesfar | Medium6.1 |
| CVE-2026-118791 | Insecure software update mechanismCompuGroup Medical · Wingesfar | High7.2 |
| CVE-2026-118790 | Multiple Hardcoded CredentialsCompuGroup Medical · Wingesfar | High7.2 |
| CVE-2026-118468 | AIS XML parsers allow external entity resolutionCompuGroup Medical · Infantia | High7.2 |
| CVE-2026-118467 | AIS products expose clinical and personal data via logs and telemetryCompuGroup Medical · Infantia | Medium4.3 |
| CVE-2026-118465 | AIS products use vendor-wide hard-coded database credentialsCompuGroup Medical · Infantia | Medium5.8 |
| CVE-2026-118464 | AIS shared cryptographic services use fixed cryptographic secretsCompuGroup Medical · Infantia | Medium5.8 |
| CVE-2026-118462 | AIS update mechanism executes unverified codeCompuGroup Medical · Infantia | Critical9.2 |
| CVE-2026-118461 | AIS PersonnelService client performs unauthenticated doctor-specific operationsCompuGroup Medical · Infantia | High8.0 |
| CVE-2026-118460 | AIS embedded private keys enable practitioner impersonationCompuGroup Medical · Infantia | High8.0 |
| CVE-2026-118459 | AIS PasswordSOS permits authentication without legitimate credentialsCompuGroup Medical · Infantia | Medium6.3 |
| CVE-2026-118458 | AIS shared test login provider contains fixed administrative credentialsCompuGroup Medical · Phronesis | High8.1 |
| CVE-2026-118450 | Venere loads replaceable unsigned components from a writable installation locationCompuGroup Medical · Venere | Medium5.9 |
| CVE-2026-112172 | Unauthenticated SQL Execution in XDent/XMedical Synchronization InfrastructureCompuGroup Medical · XDent | High8.1 |
| CVE-2026-118786 | NXP MCUXpresso SDK rpmsg-lite TZM Example before 26.06.01-lts Secure Memory Disclosure via NSC Veneer FunctionsNXP · MCUXpresso SDK | Medium6.8 |
| CVE-2026-118785 | NXP MCUXpresso SDK TrustZone-M Examples before 26.06.01-lts Secure Memory Disclosure via NSC Veneer FunctionsNXP · MCUXpresso SDK | Medium6.7 |
| CVE-2026-59104 | UgCS server HCI authentication bypass with empty credentialsSPH Engineering · UgCS | Critical9.3 |
| CVE-2026-59105 | Universal sysadmin credential vulnerability in JumisJumis Pro SIA · Jumis | Critical9.3 |
| CVE-2026-70382 | Stored Cross-Site Scripting in Web InterfaceWolfVision · Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro | Medium5.1 |
| CVE-2026-70381 | Unauthorized Access to Internal Web ResourcesWolfVision · Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro | Medium6.9 |
| CVE-2026-70380 | Resource Exhaustion in MICE ServiceWolfVision · Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro | Medium6.9 |
| CVE-2026-70379 | Unauthorized Access to vSolution Matrix RTSPWolfVision · Cynap Pro, Cynap Core Pro | High7.1 |
| CVE-2026-59107 | Shared SSH Authentication Key in vSolution Matrix File SharingWolfVision · Cynap Pro, Cynap Core Pro | Critical9.2 |
| CVE-2026-59106 | Unauthenticated RCE Vulnerability in WolfProt interface implementationWolfVision · Cynap Pure (Next Gen), Cynap Bridge | Critical9.3 |
| CVE-2026-82947 | Multiple Out-of-Bounds Reads in Frame ProcessingRT-Labs AB · SOEM | High7.1 |
| CVE-2026-82946 | Null Pointer Dereference in Mailbox Error HandlingRT-Labs AB · SOEM | Medium6.5 |
| CVE-2026-82945 | Memory Corruption via FMMU Configuration Table OverflowRT-Labs AB · SOEM | Medium6.5 |
| CVE-2026-82944 | Buffer Overflow in CoE SDO Upload Multi-Segment Data TransfersRT-Labs AB · SOEM | High8.8 |
| CVE-2026-82943 | Out-of-Bounds Read via Unchecked Length ValuesRT-Labs AB · SOEM | Medium6.5 |
| CVE-2026-70388 | Memory Corruption via Integer Underflow in Message Length ValidationRT-Labs AB · SOEM | High8.3 |
| CVE-2026-70387 | OnePlus OxygenOS exposed dangerous method vulnerabilityOnePlus · OxygenOS | High8.4 |
| CVE-2026-70386 | OnePlus OxygenOS improper neutralization of special elements vulnerabilityPublic exploitOnePlus · OxygenOS | High8.5 |
| CVE-2026-103905 | Unauthenticated Plugin Safe Mode Toggle Vulnerability in JTL-ShopJTL-Software GmbH · JTL-Shop | High8.7 |
| CVE-2026-103904 | Stored XSS Vulnerability in JTL-ShopJTL-Software GmbH · JTL-Shop | High8.6 |
| CVE-2026-89310 | SQL Command Injection Vulnerability in JTL-WMSJTL SW GmbH · JTL-WMS | Critical9.4 |
| CVE-2026-89309 | Missing Authentication Vulnerability in JTL-WMSJTL SW GmbH · JTL-WMS | Critical10.0 |
| CVE-2026-103903 | MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalationMikroTik · RouterOS | High8.7 |
| CVE-2026-103902 | DigiDoc improper signature verificationDigiDoc · libdigidocpp | High7.5 |
| CVE-2026-33586 | Authenticated SMTP Sender Address ForgeryOVHcloud · OVHcloud | Medium6.3 |
| CVE-2026-28199 | Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS ShellCohesity · NetBackup Flex OS | Medium4.8 |
| CVE-2026-28198 | Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS ShellCohesity · NetBackup Flex OS | Critical9.4 |