Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 405,136All CVEsplus 19,158 rejected
  • 545Last 24 hours4,762 in the last 7 days
  • 18,753Last 30 days1,596 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026731001111

Latest CVEs

11 CVEs, newest first

CVEs, newest first
Title
CVE-2026-2754
Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints. An unauthenticated remote attacker with…Navtor · NavBox
High7.5
CVE-2026-2753
An Absolute Path Traversal vulnerability exists in Navtor NavBox. The application exposes an HTTP service that fails to properly sanitize user-supplied path…Navtor · NavBox
High7.5
CVE-2026-2752
Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an…Navtor · NavBox
Medium5.3
CVE-2026-2249
Unauthenticated Remote Command Execution via Web Console in METIS DFSMETIS Cyberspace Technology SA · METIS DFS
Critical9.8
CVE-2026-2248
Unauthenticated Remote Root Shell Access via Web Console in METIS WICMETIS Cyberspace Technology SA · METIS WIC
Critical9.8
CVE-2026-2250
Unauthenticated Data Export and Source Code Disclosure via /dbviewer/ in METIS WICMETIS Cyberspace Technology SA · METIS WIC
High7.5
CVE-2026-22240
Plaintext Passwords Vulnerability in BLUVOYIXBluspark Global · BLUVOYIX
Critical10.0
CVE-2026-22239
Email Sending Vulnerability in BLUVOYIXBluspark Global · BLUVOYIX
Critical10.0
CVE-2026-22238
Administrator Account Creation Vulnerability in BLUVOYIXBluspark Global · BLUVOYIX
Critical10.0
CVE-2026-22237
Exposed Internal API Documentation Vulnerability in BLUVOYIXBluspark Global · BLUVOYIX
Critical10.0
CVE-2026-22236
Improper Authentication Vulnerability in BLUVOYIXBluspark Global · BLUVOYIX
Critical10.0