Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 406,610All CVEsplus 19,172 rejected
  • 70Last 24 hours4,659 in the last 7 days
  • 16,273Last 30 days1,435 of them critical
  • 1,781Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
2026085001324
2025182001111

Latest CVEs

24 CVEs, newest first

CVEs, newest first
Title
CVE-2026-110206
Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command PositionRooCodeInc · Roo-Code
High7.7
CVE-2026-110205
Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command SubstitutionPublic exploitRooCodeInc · Roo-Code
High7.7
CVE-2026-110204
Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command SubstitutionPublic exploitRooCodeInc · Roo-Code
High7.7
CVE-2026-110203
Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking DesynchronizationRooCodeInc · Roo-Code
High7.7
CVE-2026-110202
Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator StrippingPublic exploitRooCodeInc · Roo-Code
High7.7
CVE-2026-82537
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary MismatchPublic exploitRooCodeInc · Roo-Code
High7.7
CVE-2026-82536
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe OperatorPublic exploitRooCodeInc · Roo-Code
High7.7
CVE-2026-81837
RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversalPublic exploitRooCodeInc · Roo-Code
Medium5.3
CVE-2026-81836
RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmissionPublic exploitRooCodeInc · Roo-Code
Medium6.3
CVE-2026-81835
RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injectionPublic exploitRooCodeInc · Roo-Code
Medium5.1
CVE-2026-81834
RooCodeInc Roo-Code README File ExecaTerminalProcess code injectionPublic exploitRooCodeInc · Roo-Code
Medium5.3
CVE-2026-81833
RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injectionPublic exploitRooCodeInc · Roo-Code
Medium5.1
CVE-2026-63108
Roo Code 3.54.0 Command Injection via Parameter Expansion ParsingPublic exploitRooCodeInc · Roo-Code
High7.7
CVE-2025-65946
Roo Code is Vulnerable to Potential Remote Code Execution via zsh Command Validation BugRooCodeInc · Roo-Code
High8.1
CVE-2025-58374
Roo Code: Auto-approve allows npm install execution of malicious postinstall scriptsRooCodeInc · Roo-Code
High7.8
CVE-2025-58373
Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosureRooCodeInc · Roo-Code
Medium5.5
CVE-2025-58372
Roo Code: Potential Remote Code Execution via .code-workspaceRooCodeInc · Roo-Code
High8.1
CVE-2025-58371
Roo Code is vulnerable to command injection via GitHub actions workflowRooCodeInc · Roo-Code
Critical9.9
CVE-2025-58370
Roo Code: Potential Remote Code Execution via Bash Parameter Expansion and Indirect ReferenceRooCodeInc · Roo-Code
High8.1
CVE-2025-57771
Roo-Code potential remote code execution via auto-execute command parsing flawRooCodeInc · Roo-Code
High8.1
CVE-2025-54377
Roo Code Lacks Line Break Validation in its Command Execution ToolPublic exploitRooCodeInc · Roo-Code
High7.8
CVE-2025-53536
Roo Code allows Potential Remote Code Execution via .vscode/settings.jsonRooCodeInc · Roo-Code
High8.1
CVE-2025-53098
Roo Code Vulnerable to Potential Remote Code Execution via Model Context ProtocolRooCodeInc · Roo-Code
High8.1
CVE-2025-53097
Roo Code extension vulnerable to Potential Information Leakage via JSON SchemaRooCodeInc · Roo-Code
Medium5.9