Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,581All CVEsplus 19,172 rejected
- 155Last 24 hours4,784 in the last 7 days
- 16,621Last 30 days1,458 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 4 | 5 | 0 | 0 | 11 | 11 |
| Title | ||
|---|---|---|
| CVE-2026-95377 | OS command injection via DHCP option 66 in Zenitel EdgeAudioClient TFTP provisioningZenitel · VSFF6 | Critical9.4 |
| CVE-2026-95614 | Zenitel Connect host applies rsyslog configuration written to a volume shared with the hiatus containerZenitel · Zenitel Connect | Critical9.3 |
| CVE-2026-95615 | Zenitel Connect OS command injection in hiatus container via unsanitized filename in audio messages APIZenitel · Zenitel Connect | High8.7 |
| CVE-2026-95378 | Path traversal in Zenitel turbineweb certificate upload allows arbitrary file write as rootZenitel · VSFF6 | High8.6 |
| CVE-2026-95613 | Zenitel Connect pREST API adopts arbitrary PostgreSQL role from unvalidated JWT sub claimZenitel · Zenitel Connect | High8.6 |
| CVE-2026-95379 | Path traversal in Zenitel turbineweb certificate delete RPC allows arbitrary file deletion as rootZenitel · VSFF6 | High7.0 |
| CVE-2026-105623 | Zenitel Connect web interface serves production JavaScript source maps without authenticationZenitel · Zenitel Connect | Medium6.9 |
| CVE-2026-105624 | Zenitel Connect login allows account-lockout denial of serviceZenitel · Zenitel Connect | Medium6.9 |
| CVE-2026-105622 | Zenitel Connect missing lockout and rate limiting on the WAMP-CRA authentication channelZenitel · Zenitel Connect | Medium6.3 |
| CVE-2026-105625 | Zenitel Connect web interface loads integration iframe without sandboxing or origin restrictionZenitel · Zenitel Connect | Medium5.1 |
| CVE-2026-105671 | Zenitel Connect login allows username enumeration via verbose error responsesZenitel · Zenitel Connect | Medium6.9 |