Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,136All CVEsplus 19,158 rejected
- 589Last 24 hours4,788 in the last 7 days
- 18,807Last 30 days1,601 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 22 | 57 | 26 | 0 | 0 | 105 | 138 |
| 2025 | 2 | 7 | 17 | 0 | 0 | 26 | 33 |
| 2024 | 2 | 5 | 0 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-57907 | WatchGuard Endpoint Protection Local Privilege Escalation in Console-Service Communication Allows SYSTEM Code ExecutionWatchGuard · Endpoint Security | High8.5 |
| CVE-2026-121637 | WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication ResultsWatchGuard · AuthPoint Authentication Gateway | High8.9 |
| CVE-2026-121639 | WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of ServiceWatchGuard · AuthPoint Authentication Gateway | Critical9.2 |
| CVE-2026-121638 | WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle AttacksWatchGuard · AuthPoint Authentication Gateway | Critical9.1 |
| CVE-2026-121640 | WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative ActionsWatchGuard · AuthPoint Authentication Gateway | Critical9.1 |
| CVE-2026-115495 | Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management SocketWatchGuard · Mobile VPN with SSL Client | Medium5.7 |
| CVE-2026-90465 | Fireware OS Missing Authentication in FireCluster Sync Allows Privilege EscalationWatchGuard · Fireware OS | High8.7 |
| CVE-2026-93862 | Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of ServiceWatchGuard · Fireware OS | High7.2 |
| CVE-2026-112709 | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code ExecutionWatchGuard · Fireware OS | Critical9.2 |
| CVE-2026-90464 | Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as RootWatchGuard · Fireware OS | High7.2 |
| CVE-2026-103593 | Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code ExecutionWatchGuard · Fireware OS | Critical9.1 |
| CVE-2026-113881 | Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code ExecutionWatchGuard · Fireware OS | Medium6.1 |
| CVE-2026-93434 | Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration SecretsWatchGuard · Fireware OS | High8.7 |
| CVE-2026-90442 | Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of ServiceWatchGuard · Fireware OS | High8.6 |
| CVE-2026-112710 | Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code ExecutionWatchGuard · Fireware OS | Critical9.2 |
| CVE-2026-82332 | Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session HijackingWatchGuard · Fireware OS | Medium5.6 |
| CVE-2026-93857 | Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code ExecutionWatchGuard · Fireware OS | Critical9.2 |
| CVE-2026-93866 | Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds WriteWatchGuard · Fireware OS | Critical9.2 |
| CVE-2026-93864 | Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as RootWatchGuard · Fireware OS | High7.1 |
| CVE-2026-103594 | Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code ExecutionWatchGuard · Fireware OS | Critical9.5 |
| CVE-2026-104381 | Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of ServiceWatchGuard · Fireware OS | Medium6.0 |
| CVE-2026-111107 | Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of ServiceWatchGuard · Fireware OS | High8.7 |
| CVE-2026-93865 | Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action InjectionWatchGuard · Fireware OS | Critical9.2 |
| CVE-2026-115253 | WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log TamperingWatchGuard · WatchGuard Agent | High7.3 |
| CVE-2026-96293 | Endpoint Security Cleartext Storage of FileVault Recovery Key in Log FileWatchGuard · WatchGuard Agent | Medium6.9 |
| CVE-2026-13043 | WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory AccessWatchGuard · Endpoint Security | Critical9.3 |
| CVE-2026-86134 | Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of ServiceWatchGuard · Fireware OS | High8.7 |
| CVE-2026-86104 | Fireware OS Resource Exhaustion in Login Process Allows Denial of ServiceWatchGuard · Fireware OS | High8.7 |
| CVE-2026-18145 | Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code ExecutionWatchGuard · Fireware OS | High8.6 |
| CVE-2026-86101 | Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN AccessWatchGuard · Fireware OS | High7.2 |
| CVE-2026-13046 | Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code ExecutionWatchGuard · Fireware OS | High7.5 |
| CVE-2026-86131 | Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code ExecutionWatchGuard · Fireware OS | Critical9.2 |
| CVE-2026-13224 | Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File ReadWatchGuard · Fireware OS | High8.2 |
| CVE-2026-86133 | Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of ServiceWatchGuard · Fireware OS | High8.2 |
| CVE-2026-90441 | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant BWatchGuard · Fireware OS | High7.1 |
| CVE-2026-18105 | Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of ServiceWatchGuard · Fireware OS | High7.1 |
| CVE-2026-86105 | Fireware OS Improper Authorization in Access Portal Reverse ProxyWatchGuard · Fireware OS | Medium5.3 |
| CVE-2026-86136 | Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant AWatchGuard · Fireware OS | High7.1 |
| CVE-2026-86132 | Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of ServiceWatchGuard · Fireware OS | High8.2 |
| CVE-2026-86128 | Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of ServiceWatchGuard · Fireware OS | High8.2 |
| CVE-2026-81433 | Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code ExecutionWatchGuard · Fireware OS | High8.7 |
| CVE-2026-86102 | WatchGuard AP Command Injection in Internal Management API Allows Command ExecutionWatchGuard · WatchGuard AP | Critical9.3 |
| CVE-2026-87969 | WatchGuard AP Authenticated Command Injection in Diagnostic CLIWatchGuard · WatchGuard AP | High8.6 |
| CVE-2026-101891 | WatchGuard AP Improper Access Control in API Service Allows Unauthenticated AccessWatchGuard · WatchGuard AP | Critical9.3 |
| CVE-2026-95676 | AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication BypassWatchGuard · AuthPoint Authentication Gateway | High7.4 |
| CVE-2026-86135 | Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of ServiceWatchGuard · Dimension | High7.0 |
| CVE-2026-78616 | Dimension Stored XSS via Trusted CA Certificate ConfigurationWatchGuard · Dimension | Medium4.8 |
| CVE-2026-78498 | Dimension Server-Side Request Forgery via Email Server Test SettingsWatchGuard · Dimension | Medium5.1 |
| CVE-2026-78612 | Dimension SQL Injection in Scheduled ReportWatchGuard · Dimension | High8.6 |
| CVE-2026-78103 | Dimension Log Server Configuration Lock Bypass VulnerabilityWatchGuard · Dimension | Medium5.1 |