Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,127All CVEsplus 19,158 rejected
- 690Last 24 hours4,823 in the last 7 days
- 18,816Last 30 days1,605 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 6 | 16 | 15 | 7 | 0 | 44 | 44 |
| Title | ||
|---|---|---|
| CVE-2026-110265 | runZero search SQL injectionrunZero · Platform | Medium6.5 |
| CVE-2026-65184 | Avocent ACS8000 wsserver command injectionVertiv · Avocent ACS8000 | Critical9.8 |
| CVE-2026-65200 | Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responsesHuawei · openBMC | Low3.5 |
| CVE-2026-65199 | Huawei openUBMC low-privilege SNMP to administrator privilege escalationHuawei · openBMC | Medium5.4 |
| CVE-2026-65198 | Huawei Default SNMPv3 USM keyHuawei · openUBMC | High8.6 |
| CVE-2026-65197 | H3C G3/G5 HDM Firmware Verification Key ReplacementH3C · HDM Family-A G5 | Low3.1 |
| CVE-2026-16141 | OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge ValueOpenBMC · phosphor-net-ipmid | High8.1 |
| CVE-2026-16140 | OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1OpenBMC · phosphor-net-ipmid | High8.8 |
| CVE-2026-81846 | runZero MCP 'Findings summaries' Data LeakrunZero · Platform | Low3.5 |
| CVE-2026-6688 | FatFs Buffer Overflow via Unbounded LFN Filename CopyPublic exploitChaN · FatFs | High7.6 |
| CVE-2026-6687 | FatFs Stack Buffer Overflow via Uncapped exFAT Label LengthPublic exploitChaN · FatFs | High7.6 |
| CVE-2026-6686 | FatFs Use of Uninitialized Clusters After Seek Past EOFPublic exploitChaN · FatFs | Medium4.6 |
| CVE-2026-6684 | FatFs Infinite Loop in GPT Partition ScanPublic exploitChaN · FatFs | Medium4.6 |
| CVE-2026-6683 | FatFs Divide-by-Zero in exFAT SyncPublic exploitChaN · FatFs | Medium4.6 |
| CVE-2026-6682 | FatFs Integer Overflow in FAT32 Volume MountPublic exploitChaN · FatFs | High7.6 |
| CVE-2026-10303 | ServerCo getssl ACME shell script path injectionServerCo · getssl | High7.4 |
| CVE-2026-50091 | Aqara Home Android SDK hardcoded keysPublic exploitAqara · com.lumiunited.aqarahome | Critical9.1 |
| CVE-2026-50090 | Aqara OAuth redirect_uri validation bypassPublic exploitAqara · Cloud OAuth Authorization Endpoint | Critical9.3 |
| CVE-2026-50089 | Aqara IAM/SSO Gateway open redirectPublic exploitAqara · Aqara IAM/SSO Gateway | Medium6.1 |
| CVE-2026-50088 | Aqara Developer Portal cross-origin resource sharingPublic exploitAqara · Aqara Developer Portal | High8.2 |
| CVE-2026-50087 | Aqara IAM/SSO Gateway cross-origin resource sharingPublic exploitAqara · Aqara IAM/SSO Gateway | High8.2 |
| CVE-2026-50086 | Aqara unauthenticated AES oraclePublic exploitAqara · Aqara IAM/SSO Gateway | Critical10.0 |
| CVE-2026-50085 | Aqara Board IoT insecure debug APIPublic exploitAqara · Board service | High8.6 |
| CVE-2026-50084 | Aqara API cross-account accessPublic exploitAqara · Cloud Production API | Critical9.6 |
| CVE-2026-50083 | Aqara hardcoded OAuth client credentialsPublic exploitAqara · Aquara IAM/SSO Gateway | Critical9.1 |
| CVE-2026-50082 | Aqara Developer Portal insecure authentication tokenPublic exploitAqara · Cloud Developer Portal | Medium6.5 |
| CVE-2026-33362 | Meari SDK hardcoded cryptographic keysMeari · com.meari.sdk | High8.6 |
| CVE-2026-33361 | Meari weak XOR obfuscationMeari · com.meari.sdk | High7.5 |
| CVE-2026-33359 | Meari unauthenticated alert image access in cloud object storageMeari · Alibaba OSS Hosted | High7.5 |
| CVE-2026-33357 | Meari OpenAPI device status IDORMeari · com.meari.sdk | High7.5 |
| CVE-2026-33356 | Meari MQTT broker missing per-device subscribe ACLMeari · IoT Cloud MQTT Broker EMQX | High7.7 |
| CVE-2026-7778 | runZero Platform dashboard configuration exposurerunZero · Platform | Medium5.0 |
| CVE-2026-5384 | runZero Platform incorrect credential scoperunZero · Platform | Medium5.8 |
| CVE-2026-5383 | runZero Explorer missing authorization checkrunZero · Explorer | Medium4.4 |
| CVE-2026-5382 | runZero Platform MCP endpoint information leakrunZero · Platform | Low3.0 |
| CVE-2026-5381 | runZero Platform task information leakrunZero · Platform | Low2.2 |
| CVE-2026-5380 | runZero Platform cleartext secret exposurerunZero · Platform | Medium5.3 |
| CVE-2026-5379 | runZero Platform MCP certification information leakrunZero · Platform | Low3.0 |
| CVE-2026-5378 | runZero Platform user creation leakrunZero · Platform | Medium5.8 |
| CVE-2026-5376 | runZero Platform session timeout failurerunZero · Platform | Medium5.9 |
| CVE-2026-5375 | runZero Platform API credential information leakrunZero · Platform | Low2.7 |
| CVE-2026-5374 | runZero Platform MCP information leakrunZero · Platform | Medium5.8 |
| CVE-2026-5373 | runZero Platform superuser privilege escalationrunZero · Platform | High8.1 |
| CVE-2026-5372 | runZero Platform SQL injection in saved queriesrunZero · Platform | Medium6.4 |