Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,719All CVEsplus 19,170 rejected
- 442Last 24 hours4,859 in the last 7 days
- 16,902Last 30 days1,491 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 48 | 87 | 78 | 1 | 0 | 214 | 839 |
| 2025 | 21 | 106 | 100 | 1 | 0 | 228 | 625 |
| 2024 | 17 | 208 | 86 | 0 | 0 | 311 | 397 |
| 2023 | 4 | 19 | 27 | 0 | 0 | 50 | 86 |
| 2022 | 1 | 2 | 0 | 0 | 0 | 3 | 36 |
| 2021 | 2 | 13 | 4 | 0 | 0 | 19 | 33 |
| 2020 | 0 | 9 | 0 | 0 | 0 | 9 | 14 |
| 2019 | 1 | 0 | 0 | 0 | 0 | 1 | 5 |
| 2018 | 1 | 0 | 0 | 0 | 0 | 1 | 4 |
| 2017 | 2 | 1 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-125086 | D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentialsPublic exploitD-Link · M60 | Critical10.0 |
| CVE-2026-125079 | D-Link DCS-6501LH Media Service SystemConfig.ini mydlink_default_sys_info hard-coded credentialsPublic exploitD-Link · DCS-6501LH | Medium6.9 |
| CVE-2026-124564 | D-Link DIR-878 HNAP prog.cgi GetListDirectory path traversalPublic exploitD-Link · DIR-878 | Medium6.9 |
| CVE-2026-124563 | D-Link DIR-878 HNAP SetWanSettings buffer overflowPublic exploitD-Link · DIR-878 | High8.7 |
| CVE-2026-124562 | D-Link DIR-878 HNAP SetWanSettings buffer overflowPublic exploitD-Link · DIR-878 | High8.7 |
| CVE-2026-124561 | D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflowPublic exploitD-Link · DIR-878 | High8.7 |
| CVE-2026-124560 | D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflowPublic exploitD-Link · DIR-878 | Critical9.3 |
| CVE-2026-120189 | D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflowPublic exploitD-Link · DIR-505 | Critical10.0 |
| CVE-2026-118579 | D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoorPublic exploitD-Link · DIR-505 | Critical9.3 |
| CVE-2026-113736 | D-Link DHP-W610AV HNAP Login defaultvalue.xml login_prepare_hnap empty passwordPublic exploitD-Link · DHP-W610AV | Critical9.3 |
| CVE-2026-113735 | D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentialsPublic exploitD-Link · DCS-6501LH | Medium6.3 |
| CVE-2026-112146 | D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentialsPublic exploitD-Link · E15 | Medium5.3 |
| CVE-2026-110536 | D-Link DIR-868L HNAP CGI cgibin system os command injectionPublic exploitD-Link · DIR-868L | Critical10.0 |
| CVE-2026-108971 | D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verificationPublic exploitD-Link · DCS-930L | Critical9.4 |
| CVE-2026-101081 | D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflowPublic exploitD-Link · DI-8400 | Critical9.4 |
| CVE-2026-100740 | D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds writePublic exploitD-Link · DIR-895L | Critical9.4 |
| CVE-2026-96891 | D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds writeD-Link · DIR-825 | Critical9.3 |
| CVE-2026-95675 | D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management InterfacePublic exploitD-LINK · DAP-1360 | Critical9.3 |
| CVE-2026-94089 | D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflowPublic exploitD-Link · DIR-868L | Critical10.0 |
| CVE-2026-94050 | D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosureD-Link · DIR-X1860Z | Medium5.3 |
| CVE-2026-94036 | D-Link DIR-X1860/DIR-X1860Z routerd ubus access controlPublic exploitD-Link · DIR-X1860 | High8.7 |
| CVE-2026-93958 | D-Link R95 DHMAPI ssi system os command injectionPublic exploitD-Link · R95 | Critical9.4 |
| CVE-2026-91003 | D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflowPublic exploitD-Link · DI-8300 | Critical9.4 |
| CVE-2026-91001 | D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflowPublic exploitD-Link · DI-8400 | Critical9.4 |
| CVE-2026-90881 | D-Link DIR-882 CGI Binary dllog.cgi main information disclosurePublic exploitD-Link · DIR-882 | Medium6.9 |
| CVE-2026-90880 | D-Link DSL-3782 Diagnostics Diagnostics.asp system command injectionPublic exploitD-Link · DSL-3782 | Medium5.3 |
| CVE-2026-90706 | D-Link DWR-M921 formWsc os command injectionPublic exploitD-Link · DWR-M921 | Medium5.1 |
| CVE-2026-90705 | D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injectionPublic exploitD-Link · DWR-M921 | Medium5.1 |
| CVE-2026-90704 | D-Link DWR-M921 formDiskPartition system command injectionPublic exploitD-Link · DWR-M921 | Medium5.1 |
| CVE-2026-90703 | D-Link DWR-M921 formDiskCreateShare system os command injectionPublic exploitD-Link · DWR-M921 | Critical9.4 |
| CVE-2026-90702 | D-Link DWR-M921 formDiskFormat system os command injectionPublic exploitD-Link · DWR-M921 | Critical9.4 |
| CVE-2026-90699 | D-Link DWR-M920 formPinManageSetup sub_41E60C os command injectionPublic exploitD-Link · DWR-M920 | Critical9.4 |
| CVE-2026-90693 | D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflowPublic exploitD-Link · DIR-878 | Critical9.4 |
| CVE-2026-90692 | D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflowD-Link · DIR-878 | Critical9.4 |
| CVE-2026-90680 | D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflowD-Link · DIR-823G | Critical9.4 |
| CVE-2026-86510 | D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds writePublic exploitD-Link · DIR-822A | Critical9.4 |
| CVE-2026-86509 | D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflowPublic exploitD-Link · DIR-895L | Critical9.4 |
| CVE-2026-86297 | D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-onePublic exploitD-Link · DIR-605 | Critical9.2 |
| CVE-2026-86296 | D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflowPublic exploitD-Link · DIR-822A | Critical10.0 |
| CVE-2026-86295 | D-Link DIR-895L udhcpcd serverpacket.c sendACK command injectionPublic exploitD-Link · DIR-895L | Medium6.9 |
| CVE-2026-85224 | D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injectionPublic exploitD-Link · DNS-320 ShareCenter | Critical9.4 |
| CVE-2026-85223 | D-Link DNS-340L CGI dropbox.cgi os command injectionPublic exploitD-Link · DNS-340L | Critical9.4 |
| CVE-2026-85222 | D-Link DNS-340L Add-On Center addon_center.cgi os command injectionPublic exploitD-Link · DNS-340L | Critical9.4 |
| CVE-2026-82692 | D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injectionPublic exploitD-Link · DNS-340L | Critical9.4 |
| CVE-2026-82691 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injectionPublic exploitD-Link · DNS-320L | Critical9.4 |
| CVE-2026-82690 | D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injectionPublic exploitD-Link · DNS-327L | Critical9.4 |
| CVE-2026-82689 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injectionPublic exploitD-Link · DNS-320L | Critical9.4 |
| CVE-2026-82688 | D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injectionPublic exploitD-Link · DNS-340L | Critical9.4 |
| CVE-2026-82680 | D-Link DSM-G600 Multipart load_file.cgi out-of-bounds writePublic exploitD-Link · DSM-G600 | High8.7 |
| CVE-2026-82595 | D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injectionPublic exploitD-Link · DIR-825M | Medium5.3 |