Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,137All CVEsplus 19,141 rejected
- 330Last 24 hours3,296 in the last 7 days
- 16,931Last 30 days1,560 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 8 | 7 | 0 | 0 | 16 | 16 |
| Title | ||
|---|---|---|
| CVE-2026-121453 | SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpointdataease · SQLBot | Medium5.1 |
| CVE-2026-93660 | SQLBot through 1.10.1 Improper Access Control via Dashboard Updatedataease · SQLBot | High7.1 |
| CVE-2026-53557 | SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command ExecutionPublic exploitdataease · SQLBot | High7.7 |
| CVE-2026-53555 | Stored XSS via SVG UploadPublic exploitdataease · SQLBot | Medium5.1 |
| CVE-2026-53556 | SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File ReadPublic exploitdataease · SQLBot | Medium6.0 |
| CVE-2026-53554 | SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import ProcessingPublic exploitdataease · SQLBot | High7.3 |
| CVE-2026-72743 | SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-htmlPublic exploitdataease · SQLBot | Medium5.1 |
| CVE-2026-42463 | SQLBot: Unauthorized Access VulnerabilityPublic exploitdataease · SQLBot | High8.6 |
| CVE-2026-33324 | SQLBot prompt injection allows arbitrary SQL execution and remote code executionPublic exploitdataease · SQLBot | Critical9.4 |
| CVE-2026-5417 | Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgeryPublic exploitDataease · SQLbot | Medium5.1 |
| CVE-2026-32950 | SQLBot: RCE via SQL Injection in Excel Upload EndpointPublic exploitdataease · SQLBot | High8.6 |
| CVE-2026-32949 | SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQLPublic exploitdataease · SQLBot | High8.7 |
| CVE-2026-32622 | SQLBot: Remote Code Execution via Terminology PoisoningPublic exploitdataease · SQLBot | High8.6 |
| CVE-2025-15598 | Dataease SQLBot JWT Token auth.py validateEmbedded signature verificationPublic exploitDataease · SQLBot | Medium6.3 |
| CVE-2025-15597 | Dataease SQLBot API Endpoint assistant.py access controlPublic exploitDataease · SQLBot | Medium5.3 |
| CVE-2025-69285 | SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerabilityPublic exploitdataease · SQLBot | High7.7 |