Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,126All CVEsplus 19,141 rejected
- 319Last 24 hours3,307 in the last 7 days
- 16,921Last 30 days1,560 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 9 | 1 | 0 | 0 | 11 | 15 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2024 | 1 | 3 | 0 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-104080 | Control Web Panel (CWP) < 1.29 OS Command Injection via valid_tokenPublic exploitControl Web Panel · Control Web Panel | High8.5 |
| CVE-2026-77881 | Control Web Panel (CWP) < 1.29 Blind SQL Injection via user ParameterPublic exploitControl Web Panel · Control Web Panel | Medium6.8 |
| CVE-2026-77880 | Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/Public exploitControl Web Panel · Control Web Panel | High8.5 |
| CVE-2026-77879 | Control Web Panel (CWP) < 1.16 SQL Injection via access_token() APIPublic exploitControl Web Panel · Control Web Panel | High8.4 |
| CVE-2026-77878 | Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase APIPublic exploitControl Web Panel · Control Web Panel | High8.5 |
| CVE-2026-77877 | Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root AccessPublic exploitControl Web Panel · Control Web Panel | High8.5 |
| CVE-2026-77876 | Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directoryPublic exploitControl Web Panel · Control Web Panel | High8.7 |
| CVE-2026-73697 | Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editorPublic exploitControl Web Panel · Control Web Panel | High8.7 |
| CVE-2026-73696 | Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndexPublic exploitControl Web Panel · Control Web Panel | High8.6 |
| CVE-2026-73695 | Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.phpPublic exploitControl Web Panel · Control Web Panel | High8.7 |
| CVE-2026-57517 | Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes ParameterPublic exploitControl Web Panel · Control Web Panel | Critical9.3 |
| CVE-2023-42123 | Control Web Panel mysql_manager Command Injection Remote Code Execution VulnerabilityControl Web Panel · Control Web Panel | High8.8 |
| CVE-2023-42122 | Control Web Panel wloggui Command Injection Local Privilege Escalation VulnerabilityControl Web Panel · Control Web Panel | High7.8 |
| CVE-2023-42121 | Control Web Panel Missing Authentication Remote Code Execution VulnerabilityControl Web Panel · Control Web Panel | Critical9.8 |
| CVE-2023-42120 | Control Web Panel dns_zone_editor Command Injection Remote Code Execution VulnerabilityControl Web Panel · Control Web Panel | High8.8 |