Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,043All CVEsplus 19,141 rejected
- 251Last 24 hours3,253 in the last 7 days
- 16,892Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 30 | 70 | 57 | 4 | 0 | 161 | 275 |
| 2025 | 10 | 24 | 40 | 6 | 0 | 80 | 114 |
| 2024 | 6 | 7 | 6 | 2 | 0 | 21 | 34 |
| 2023 | 3 | 0 | 10 | 0 | 0 | 13 | 13 |
| Title | ||
|---|---|---|
| CVE-2026-113876 | SmileCDR HAPI FHIR unauthorized readSmileCDR · HAPI FHIR | Medium5.3 |
| CVE-2026-113875 | SmileCDR HAPI FHIR unauthorized read via subscriptionSmileCDR · HAPI FHIR | Low2.3 |
| CVE-2026-113874 | SmileCDR HAPI FHIR trusted tenant partition overrideSmileCDR · HAPI FHIR | High8.6 |
| CVE-2026-113873 | SmileCDR HAPI FHIR improper data decompressionSmileCDR · HAPI FHIR | High8.7 |
| CVE-2026-97635 | Agent Zero Web UI XSSAgent Zero · Agent Zero | High8.6 |
| CVE-2026-105773 | Canimaan Software ClamXAV local privilege escalationCanimaan Software · ClamXAV | High7.3 |
| CVE-2026-102262 | Newell Brands DYMO ID parent directory open to path traversal through improper spheres of controlNewell Brands · DYMO ID | High7.0 |
| CVE-2026-101893 | Newell Brands DYMO ID document parsing failing file type extension authentication checkNewell Brands · DYMO ID | Medium5.1 |
| CVE-2026-102628 | Cadmos LTI exposure of sensitive information via debug modeEummena · Cadmos LTI | Critical9.2 |
| CVE-2026-100251 | Wormhole.app SSRFWormhole App · Wormhole | Medium6.9 |
| CVE-2026-102671 | Joyland AI WebView accepts invalid SSL certificatesJoyland · Joyland.ai | Medium6.9 |
| CVE-2026-102670 | Joyland AI enables HTTPJoyland · Joyland.ai | Medium5.3 |
| CVE-2026-102669 | Joyland AI hostname checking disabledJoyland · Joyland.ai | Medium6.9 |
| CVE-2026-102668 | Joyland AI accepts TLS certificates without validationJoyland · Joyland.ai | Medium6.9 |
| CVE-2026-102667 | Joyland AI WebView command injectionJoyland · Joyland.ai | Critical9.0 |
| CVE-2026-82358 | RT-Labs AB C-Open CANopen SDO Server Write Protection BypassRT-Labs AB · C-Open | High7.1 |
| CVE-2026-102666 | Joyland AI hard-coded credentials for push notificationsJoyland · Joyland.ai | Medium6.9 |
| CVE-2026-82357 | RT-Labs AB C-Open CANopen NULL pointer dereferenceRT-Labs AB · C-Open | High7.1 |
| CVE-2026-102105 | Kiteworks Email Protection Gateway server-side request forgeryKiteworks · Email Protection Gateway | Critical9.1 |
| CVE-2026-102106 | Kiteworks Email Protection Gateway improper authenticationKiteworks · Email Protection Gateway | Critical9.1 |
| CVE-2026-102107 | Kiteworks Core user impersonation in a file-request featureKiteworks · Core | Medium4.6 |
| CVE-2026-102108 | Kiteworks Email Protection Gateway deserialization of untrusted dataKiteworks · Email Protection Gateway | High7.2 |
| CVE-2026-102109 | Kiteworks Secure Data Forms SQL injectionKiteworks · Secure Data Forms | High7.1 |
| CVE-2026-102110 | Missing authentication on a Kiteworks appliance setup functionKiteworks · Core | Medium5.9 |
| CVE-2026-102111 | Kiteworks Core Improper Validation of Specified Quantity in InputKiteworks · Core | Medium4.9 |
| CVE-2026-102112 | Kiteworks Core Local Privilege EscalationKiteworks · Core | High7.8 |
| CVE-2026-102113 | Kiteworks Core Local Privilege EscalationKiteworks · Core | High7.8 |
| CVE-2026-102114 | Kiteworks Core OS Command InjectionKiteworks · Core | High7.2 |
| CVE-2026-102115 | Kiteworks Core Authentication Bypass in the Password Reset WorkflowKiteworks · Core | Critical9.8 |
| CVE-2026-102116 | Kiteworks Email Protection Gateway Path TraversalKiteworks · Email Protection Gateway | High7.2 |
| CVE-2026-102117 | Kiteworks Core Remote Code ExecutionKiteworks · Core | High7.2 |
| CVE-2026-102118 | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege EscalationKiteworks · Core | High7.8 |
| CVE-2026-102119 | Kiteworks Email Protection Gateway Path TraversalKiteworks · Email Protection Gateway | High7.2 |
| CVE-2026-102120 | Kiteworks Core OS Command InjectionKiteworks · Core | High8.8 |
| CVE-2026-102121 | Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized ActorKiteworks · Secure Data Forms | High8.6 |
| CVE-2026-102104 | Kiteworks Email Protection Gateway server-side request forgeryKiteworks · Email Protection Gateway | Critical9.1 |
| CVE-2026-102122 | Kiteworks Core Incorrect AuthorizationKiteworks · Core | Medium4.3 |
| CVE-2026-102123 | Kiteworks Core Path TraversalKiteworks · Core | High7.4 |
| CVE-2026-102103 | Kiteworks Email Protection Gateway server-side request forgeryKiteworks · Email Protection Gateway | Critical9.1 |
| CVE-2026-102124 | Kiteworks Core Missing Authentication for Critical FunctionKiteworks · Core | Medium6.5 |
| CVE-2026-102125 | Kiteworks Core Sandbox EscapeKiteworks · Core | High8.8 |
| CVE-2026-102126 | Kiteworks Core Stored Cross-site Scripting (XSS)Kiteworks · Core | High8.1 |
| CVE-2026-102127 | Kiteworks Email Protection Gateway Improper Restriction of XML External Entity ReferenceKiteworks · Email Protection Gateway | High7.0 |
| CVE-2026-102128 | Kiteworks Email Protection Gateway Improper AuthenticationKiteworks · Email Protection Gateway | High7.5 |
| CVE-2026-102129 | Kiteworks Core Incorrect Privilege AssignmentKiteworks · Core | High7.2 |
| CVE-2026-102130 | Kiteworks Email Protection Gateway Remote Code ExecutionKiteworks · Email Protection Gateway | High7.2 |
| CVE-2026-102131 | Kiteworks Email Protection Gateway Improper Handling of Case SensitivityKiteworks · Email Protection Gateway | High7.2 |
| CVE-2026-102132 | Kiteworks Core Privilege Escalation through Improper Access ControlKiteworks · Core | High7.2 |
| CVE-2026-102133 | Kiteworks Core Arbitrary File Write through Command InjectionKiteworks · Core | Medium6.6 |
| CVE-2026-102102 | Kiteworks Email Protection Gateway server-side request forgeryKiteworks · Email Protection Gateway | Critical9.1 |