Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,644All CVEsplus 19,170 rejected
- 561Last 24 hours4,909 in the last 7 days
- 18,567Last 30 days1,585 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 4 | 26 | 12 | 0 | 0 | 42 | 42 |
| Title | ||
|---|---|---|
| CVE-2026-100626 | capgo through 12.128.2 IDOR via PUT /app icon endpointCap-go · capgo.app | Medium5.3 |
| CVE-2026-100629 | Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCHPublic exploitCap-go · capgo.app | High7.0 |
| CVE-2026-100628 | capgo.app before 12.128.12 Authentication Bypass via apikeyPublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-100627 | Capgo bundle promotion API channel RBAC deny override bypassPublic exploitCap-go · capgo.app | High7.2 |
| CVE-2026-100625 | Capgo Build Upload Proxy Authorization Bypass via TUS ResourcePublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-100624 | Capgo.app before 12.264.5 Upload Expiry Bypass via build uploadPublic exploitCap-go · capgo.app | Medium5.3 |
| CVE-2026-100623 | Capgo Authentication Bypass via Direct PostgREST org_users Table WritePublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-100622 | capgo.app through 12.129.0 Cache Restoration of Deleted BundlesPublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-100621 | capgo.app Content-Lock Bypass via r2-direct Bundle MutationPublic exploitCap-go · capgo.app | Medium5.3 |
| CVE-2026-100620 | Capgo CLI through 7.98.2 Excessive Permissions via Overpermissioned Play Console Service AccountPublic exploitCap-go · @capgo/cli | Medium5.1 |
| CVE-2026-100619 | Capgo OTA Manifest Poisoning via app_versions.manifest BypassPublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-100618 | Capgo App Icon Update Privilege Escalation via Service-Role WorkerPublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-100617 | Cap-go capgo.app Authorization Bypass via channel_permission_overridesPublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-100616 | capgo.app Authentication Bypass via PostgREST customer_id MutationPublic exploitCap-go · capgo.app | High7.0 |
| CVE-2026-100615 | Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key RotationPublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-100614 | Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata WorkerPublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-100613 | capgo.app Authorization Bypass via Stale Channel Permission OverridesPublic exploitCap-go · capgo.app | Medium6.0 |
| CVE-2026-100612 | Capgo SSO Provider ID Authentication Bypass via Incomplete MigrationCap-go · capgo.app | High8.6 |
| CVE-2026-100611 | Capgo apikey_manager Role Privilege Escalation via Incomplete Role Deny-listPublic exploitCap-go · capgo.app | High7.1 |
| CVE-2026-88864 | Capgo SSO Provider Authentication Bypass via PostgREST Direct WritePublic exploitCap-go · capgo.app | Critical9.3 |
| CVE-2026-88863 | capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_orgCap-go · capgo.app | High8.6 |
| CVE-2026-88862 | Capgo API Key Manager Authentication Bypass via x-limited-key-idPublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-88861 | Capgo AAL1 Session MFA Bypass via Direct RBAC AuthorizationPublic exploitCap-go · capgo.app | High8.7 |
| CVE-2026-88860 | Capgo Authorization Bypass via Stale Channel Permission OverridesCap-go · capgo.app | Critical9.3 |
| CVE-2026-56339 | Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPCPublic exploitCap-go · capgo | High8.7 |
| CVE-2026-56296 | Cap-go - App Existence Oracle via Unauthenticated transfer_app RPCPublic exploitCap-go · capgo | Medium6.9 |
| CVE-2026-56284 | Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPCPublic exploitCap-go · capgo | Medium6.9 |
| CVE-2026-56226 | Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPCPublic exploitCap-go · capgo | High8.7 |
| CVE-2026-56310 | Cap-go - Authorization Bypass in Organization Members Endpoint via API Key Scope BypassPublic exploitCap-go · capgo | Medium5.3 |
| CVE-2026-56245 | Supabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPCPublic exploitCap-go · capgo | High8.8 |
| CVE-2026-56248 | Capgo - Unauthenticated Denial-of-Service via audit_logs RLS PolicyPublic exploitCap-go · capgo | High8.7 |
| CVE-2026-56280 | Cap-go - Privilege Inversion in Build Log Stream via SSE DisconnectPublic exploitCap-go · capgo | High7.1 |
| CVE-2026-56221 | Cap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.tsPublic exploitCap-go · capgo | High7.1 |
| CVE-2026-56316 | Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*Public exploitCap-go · capgo | Medium6.9 |
| CVE-2026-56307 | Cap-go - Broken Cursor Pagination in /private/devices EndpointPublic exploitCap-go · capgo | Medium5.3 |
| CVE-2026-56235 | Capgo - Unauthenticated Cross-Tenant Metrics Disclosure via RPC FunctionsPublic exploitCap-go · capgo | Medium6.9 |
| CVE-2026-56082 | Capgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPCPublic exploitCap-go · capgo | High8.7 |
| CVE-2026-56081 | Cap-go - Account Lockout via 2FA Misconfiguration on Unverified EmailPublic exploitCap-go · capgo | Critical9.3 |
| CVE-2026-56080 | Cap-go - Authentication Logic Flaw in Enforce Password PolicyPublic exploitCap-go · capgo | Medium6.9 |
| CVE-2026-56073 | Cap-go - OTP Bypass via Response Manipulation in Email VerificationPublic exploitCap-go · capgo | Critical9.3 |
| CVE-2026-53982 | Cap-go Console < 12.28.2 Account Deletion DoS via Device Identifier AssociationCap-go · capgo | High7.1 |
| CVE-2026-53981 | Cap-go < v12.128.2 Account Takeover via Unauthenticated Email Change MechanismPublic exploitCap-go · Cap-go | High7.2 |