Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,126All CVEsplus 19,141 rejected
- 319Last 24 hours3,306 in the last 7 days
- 16,921Last 30 days1,560 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 5 | 27 | 57 | 9 | 0 | 98 | 199 |
| 2025 | 2 | 12 | 18 | 2 | 0 | 34 | 101 |
| 2024 | 2 | 5 | 19 | 2 | 0 | 28 | 67 |
| 2023 | 3 | 7 | 18 | 2 | 0 | 30 | 39 |
| 2022 | 0 | 4 | 4 | 0 | 0 | 8 | 9 |
| 2021 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-120716 | Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an…Devolutions · Server | Medium6.5 |
| CVE-2026-119636 | Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an…Devolutions · Server | High8.8 |
| CVE-2026-120734 | Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with…Devolutions · Server | Medium6.5 |
| CVE-2026-120715 | Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authenticated low-privileged…Devolutions · Server | High8.1 |
| CVE-2026-120733 | Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the…Devolutions · Server | High7.5 |
| CVE-2026-121580 | Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-privileged user to…Devolutions · Server | High8.1 |
| CVE-2026-116627 | Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0…Devolutions · PowerShell Universal | High8.7 |
| CVE-2026-114487 | Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an…Devolutions · Server | Medium4.3 |
| CVE-2026-114486 | Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative…Devolutions · Server | Medium4.3 |
| CVE-2026-114485 | Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with…Devolutions · Server | Medium4.3 |
| CVE-2026-110805 | Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate…Devolutions · Server | Low2.6 |
| CVE-2026-110804 | Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM…Devolutions · Server | Medium4.3 |
| CVE-2026-110806 | Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain…Devolutions · Server | Medium6.5 |
| CVE-2026-110287 | Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit…Devolutions · Server | Medium4.3 |
| CVE-2026-105488 | Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission…Devolutions · Server | High7.1 |
| CVE-2026-105485 | Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via…Devolutions · Server | Medium6.8 |
| CVE-2026-9226 | Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account…Devolutions · Server | Medium6.8 |
| CVE-2026-100289 | Missing authorization in the gateway network scan token API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to…Devolutions · Server | Medium5.0 |
| CVE-2026-100288 | Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to…Devolutions · Server | High7.2 |
| CVE-2026-100287 | Missing authorization in the attachment history API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to permanently…Devolutions · Server | Medium5.4 |
| CVE-2026-100286 | Missing authorization in the data source settings API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated non-administrative user to disclose…Devolutions · Server | Medium6.5 |
| CVE-2026-93332 | Improper access control in the partial connection API in Devolutions Server 2026.3.5.0 and earlier allows an authenticated low-privileged user to read, create,…Devolutions · Server | Medium5.4 |
| CVE-2026-93330 | Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypass the Devolutions…Devolutions · Server | Medium4.3 |
| CVE-2026-92237 | Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an…Devolutions · PowerShell Universal | Medium6.5 |
| CVE-2026-13327 | Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to…Devolutions · Server | High8.3 |
| CVE-2026-84850 | Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a…Devolutions · Server | Medium4.8 |
| CVE-2026-90969 | Improper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and earlier allows an authenticated user lacking the view-password…Devolutions · Server | Medium6.5 |
| CVE-2026-90971 | Server-Side Request Forgery (SSRF) in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user…Devolutions · Server | Medium6.5 |
| CVE-2026-78417 | Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier,…Devolutions · Remote Desktop Manager | Medium4.3 |
| CVE-2026-19768 | Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an…Devolutions · PowerShell Universal | High8.1 |
| CVE-2026-8497 | Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS…Devolutions · Password Manager | High7.4 |
| CVE-2026-17570 | Improper access control in the PAM password history endpoints in Devolutions Server allows an authenticated low-privileged user to disclose plaintext…Devolutions · Server | Medium4.3 |
| CVE-2026-17569 | Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored…Devolutions · Server | Medium4.3 |
| CVE-2026-17568 | Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-administrative user holding the user-group…Devolutions · Server | High8.8 |
| CVE-2026-16802 | Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file…Devolutions · PowerShell Universal | Medium6.5 |
| CVE-2026-16801 | Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an…Devolutions · PowerShell Universal | High8.8 |
| CVE-2026-16800 | Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an…Devolutions · PowerShell Universal | High8.8 |
| CVE-2026-16799 | Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user…Devolutions · PowerShell Universal | Medium5.0 |
| CVE-2026-16798 | Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated…Devolutions · PowerShell Universal | Medium6.5 |
| CVE-2026-15058 | Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated user to delete another…Devolutions · Server | Low3.1 |
| CVE-2026-15642 | Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an…Devolutions · Server | Low3.3 |
| CVE-2026-15641 | Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged user to approve…Devolutions · Server | High7.1 |
| CVE-2026-15637 | Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privileged…Devolutions · Server | High7.5 |
| CVE-2026-14536 | Improper enforcement of a mandatory multi-factor authentication policy in Devolutions Server 2026.2.9.0 allows an attacker with valid user credentials to…Devolutions · Server | High7.3 |
| CVE-2026-13437 | Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI…Devolutions · PowerShell Universal | Medium6.5 |
| CVE-2026-13372 | Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Manager 2026.2.5 through 2026.2.11 allows an…Devolutions · Remote Desktop Manager | High7.2 |
| CVE-2026-12755 | Improper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0 through 2026.2.7.0 allows an authenticated user with the…Devolutions · Server | Low2.7 |
| CVE-2026-10696 | Use of an incorrectly resolved name or reference in the pinget backend in Devolutions UniGetUI 2026.2.0 and earlier allows a WinGet community catalog…Devolutions · UniGetUI | High7.5 |
| CVE-2026-12105 | Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to access attachments via folder duplication with inherited…Devolutions · Devolutions Server | Medium6.5 |
| CVE-2026-12117 | Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allows an authenticated vault member to enumerate social login…Devolutions · Devolutions Server | Medium4.3 |