Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,545All CVEsplus 19,172 rejected
- 357Last 24 hours4,847 in the last 7 days
- 16,726Last 30 days1,464 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 33 | 95 | 78 | 16 | 0 | 222 | 1,150 |
| 2025 | 13 | 46 | 142 | 36 | 0 | 237 | 928 |
| 2024 | 10 | 33 | 65 | 13 | 0 | 121 | 691 |
| 2023 | 14 | 68 | 96 | 20 | 0 | 198 | 570 |
| 2022 | 7 | 39 | 49 | 11 | 0 | 106 | 372 |
| 2021 | 6 | 44 | 71 | 5 | 0 | 126 | 266 |
| 2020 | 4 | 13 | 28 | 0 | 0 | 45 | 140 |
| 2019 | 6 | 12 | 22 | 0 | 0 | 40 | 95 |
| 2018 | 2 | 3 | 12 | 0 | 0 | 17 | 55 |
| 2017 | 4 | 11 | 23 | 0 | 0 | 38 | 38 |
| Title | ||
|---|---|---|
| CVE-2026-126229 | A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7,…Fortinet · FortiManager | Critical9.1 |
| CVE-2026-126262 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1,…Fortinet · FortiAnalyzer | Critical9.3 |
| CVE-2026-121528 | A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.13, FortiOS 7.0…Fortinet · FortiOS | High7.7 |
| CVE-2026-126259 | A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS…Fortinet · FortiOS | Critical9.0 |
| CVE-2026-126263 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0…Fortinet · FortiMail | Critical9.4 |
| CVE-2026-126255 | A path traversal: '../filedir' vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0…Fortinet · FortiOS | High7.4 |
| CVE-2026-126256 | A out-of-bounds read vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through…Fortinet · FortiOS | High7.4 |
| CVE-2026-121527 | A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2…Fortinet · FortiClientEMS | Medium6.3 |
| CVE-2026-126254 | A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0…Fortinet · FortiOS | Critical9.6 |
| CVE-2026-126258 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port access to crash proxy…Fortinet · FortiOS | High7.1 |
| CVE-2026-126257 | A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…Fortinet · FortiAuthenticator | Critical9.0 |
| CVE-2026-121526 | A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10…Fortinet · FortiAuthenticator | Medium5.8 |
| CVE-2026-126253 | A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12,…Fortinet · FortiOS | Critical9.3 |
| CVE-2026-126252 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,…Fortinet · FortiAuthenticator | High8.3 |
| CVE-2026-126251 | A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to…Fortinet · FortiAuthenticator | Critical9.1 |
| CVE-2026-126250 | A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…Fortinet · FortiAuthenticator | High8.2 |
| CVE-2026-126248 | A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…Fortinet · FortiAuthenticator | High7.5 |
| CVE-2026-126246 | A null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…Fortinet · FortiAuthenticator | High7.5 |
| CVE-2026-126249 | A improper privilege management vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…Fortinet · FortiAuthenticator | High7.2 |
| CVE-2026-126247 | A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may…Fortinet · FortiAuthenticator | High7.2 |
| CVE-2026-126245 | A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated…Fortinet · FortiAuthenticator | High8.1 |
| CVE-2026-126244 | A allocation of resources without limits or throttling vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through…Fortinet · FortiAuthenticator | High7.5 |
| CVE-2026-126236 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1,…Fortinet · FortiManager | High7.2 |
| CVE-2026-126241 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,…Fortinet · FortiAuthenticator | High8.8 |
| CVE-2026-126239 | A stack-based buffer overflow vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…Fortinet · FortiAuthenticator | High7.5 |
| CVE-2026-126214 | A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through…Fortinet · FortiManager | High7.2 |
| CVE-2026-126224 | A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through…Fortinet · FortiManager | High7.2 |
| CVE-2026-126216 | A improper privilege management vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager…Fortinet · FortiManager | Low3.8 |
| CVE-2026-126228 | A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11,…Fortinet · FortiManager | High7.2 |
| CVE-2026-126215 | A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11,…Fortinet · FortiManager | High8.2 |
| CVE-2026-126240 | A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,…Fortinet · FortiAuthenticator | High8.2 |
| CVE-2026-126217 | A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11,…Fortinet · FortiManager | High8.7 |
| CVE-2026-126238 | A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…Fortinet · FortiAuthenticator | High8.6 |
| CVE-2026-126225 | A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1,…Fortinet · FortiManager | High7.1 |
| CVE-2026-126227 | A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7,…Fortinet · FortiManager | High7.2 |
| CVE-2026-126220 | A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager…Fortinet · FortiManager | High7.2 |
| CVE-2026-126219 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through…Fortinet · FortiManager | High7.2 |
| CVE-2026-126235 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer…Fortinet · FortiManager | High7.2 |
| CVE-2026-126221 | A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiAnalyzer 8.0.0,…Fortinet · FortiManager | High7.2 |
| CVE-2026-126237 | A loop with unreachable exit condition ('infinite loop') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through…Fortinet · FortiAuthenticator | High7.5 |
| CVE-2026-126234 | A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer Cloud 8.0.0, FortiManager…Fortinet · FortiManager | High7.2 |
| CVE-2026-126243 | A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to…Fortinet · FortiAuthenticator | High7.2 |
| CVE-2026-126233 | A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer…Fortinet · FortiManager | High7.2 |
| CVE-2026-126242 | A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to…Fortinet · FortiAuthenticator | High7.4 |
| CVE-2026-126222 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer…Fortinet · FortiManager | High7.2 |
| CVE-2026-126211 | A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 through 7.6.7, FortiAnalyzer Cloud 8.0.0…Fortinet · FortiManager | High7.2 |
| CVE-2026-126213 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1,…Fortinet · FortiManager | High7.1 |
| CVE-2026-126218 | A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager…Fortinet · FortiManager | High8.2 |
| CVE-2026-126185 | A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7,…Fortinet · FortiManager | High7.2 |
| CVE-2026-126232 | A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through…Fortinet · FortiManager | High7.5 |