Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 402,126All CVEsplus 19,141 rejected
  • 319Last 24 hours3,310 in the last 7 days
  • 16,921Last 30 days1,560 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20262520940402783,484
202522365623804873,206
20244795112216601,2862,719
202317159265702591,433
2022623245602981,174
2021416021330218876
20203712123120193658
201921319120154465
2018301694700246311
201714616006365
20161000012
20150100011

Latest CVEs

3,484 CVEs, newest first

CVEs, newest first
Title
CVE-2026-92196
Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution VulnerabilityQuest · Foglight for Databases
High7.2
CVE-2026-92200
Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation VulnerabilityQuest · Foglight for Databases
High7.8
CVE-2026-92198
Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure VulnerabilityQuest · Foglight for Databases
High8.2
CVE-2026-92199
Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation VulnerabilityQuest · Foglight for Databases
High7.8
CVE-2026-92185
Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure VulnerabilityQuest · Foglight for Databases
High7.2
CVE-2026-92189
Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution VulnerabilityQuest · Foglight for Databases
Critical9.8
CVE-2026-92197
Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution VulnerabilityQuest · Foglight for Databases
High8.8
CVE-2026-92191
Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution VulnerabilityQuest · Foglight for Databases
High8.8
CVE-2026-92186
Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution VulnerabilityQuest · Foglight for Databases
High8.8
CVE-2026-92194
Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution VulnerabilityQuest · Foglight for Databases
High8.8
CVE-2026-92195
Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution VulnerabilityQuest · Foglight for Databases
High8.8
CVE-2026-92192
Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution VulnerabilityQuest · Foglight for Databases
High8.8
CVE-2026-92188
Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution VulnerabilityQuest · Foglight for Databases
Critical9.8
CVE-2026-92193
Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure VulnerabilityQuest · Foglight for Databases
Medium6.5
CVE-2026-92187
Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution VulnerabilityQuest · Foglight for Databases
High8.8
CVE-2026-92190
Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution VulnerabilityQuest · Foglight for Databases
Critical9.8
CVE-2026-92211
Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution VulnerabilityPixar Animation Studio · OpenUSD
High7.8
CVE-2026-114552
MailEnable parseObjectResponse XML External Entity Processing Information Disclosure VulnerabilityMailEnable · MailEnable
Medium6.5
CVE-2026-114551
MailEnable Auth Cleartext Storage Information Disclosure VulnerabilityMailEnable · MailEnable
Medium5.9
CVE-2026-114550
libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerabilitylibwebsockets · libwebsockets
High8.1
CVE-2026-114549
NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution VulnerabilityNoMachine · NoMachine
Critical9.8
CVE-2026-118628
MLflow get-artifacts Server-Side Request Forgery Information Disclosure VulnerabilityMLflow · MLflow
High8.2
CVE-2026-118627
MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution VulnerabilityMLflow · MLflow
High7.8
CVE-2026-118626
MLflow Tracking Server Issues Missing Authorization Privilege Escalation VulnerabilityMLflow · MLflow
Medium5.4
CVE-2026-118625
MLflow Tracking Server Missing Authorization Privilege Escalation VulnerabilityMLflow · MLflow
Medium6.3
CVE-2026-118624
MLflow Tracking Server Jobs Missing Authorization Information Disclosure VulnerabilityMLflow · MLflow
Medium5.4
CVE-2026-118623
MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution VulnerabilityMLflow · MLflow
High7.8
CVE-2026-118619
Ultralytics Google Drive Download Path Traversal Remote Code Execution VulnerabilityUltralytics · Ultralytics
High8.8
CVE-2026-118618
Ultralytics parse_model Code Injection Remote Code Execution VulnerabilityUltralytics · Ultralytics
High7.8
CVE-2026-118617
Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution VulnerabilityUltralytics · Ultralytics
High7.8
CVE-2026-118616
Ultralytics parse_model Code Injection Remote Code Execution VulnerabilityUltralytics · Ultralytics
High7.8
CVE-2026-118615
Ultralytics torch_safe_load Command Injection Remote Code Execution VulnerabilityUltralytics · Ultralytics
High7.8
CVE-2026-118614
Ultralytics check_det_dataset Code Injection Remote Code Execution VulnerabilityUltralytics · Ultralytics
High7.8
CVE-2026-118613
Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution VulnerabilityUltralytics · Ultralytics
High7.8
CVE-2026-118611
Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution VulnerabilityAlpine · iLX-F511
Medium6.8
CVE-2026-118610
Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine · iLX-F511
High8.8
CVE-2026-118609
Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine · iLX-F511
Medium6.8
CVE-2026-118608
Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure VulnerabilityAlpine · iLX-F511
Low3.5
CVE-2026-118607
Alpine iLX-F511 diagapp Command Injection VulnerabilityAlpine · iLX-F511
Medium6.8
CVE-2026-118606
Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution VulnerabilityAlpine · iLX-F511
High8.8
CVE-2026-118605
Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine · iLX-F511
High8.0
CVE-2026-118604
Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine · iLX-F511
Medium6.8
CVE-2026-118603
Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine · iLX-F511
High8.0
CVE-2026-118602
Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation VulnerabilityAlpine · iLX-F511
High7.8
CVE-2026-118601
Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution VulnerabilityAlpine · iLX-F511
Medium6.3
CVE-2026-92202
Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution VulnerabilityLuxion · KeyShot
High7.8
CVE-2026-92183
GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityGIMP · GIMP
High7.8
CVE-2026-92207
MindsDB OpenBBtable Code Injection Remote Code Execution VulnerabilityMindsDB · MindsDB
High8.8
CVE-2026-92206
CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution VulnerabilityCrewAI · CrewAI
High8.8
CVE-2026-92205
BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation VulnerabilityBusyBox · BusyBox
Medium6.1