Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,375All CVEsplus 19,159 rejected
- 663Last 24 hours4,935 in the last 7 days
- 18,821Last 30 days1,601 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 7 | 9 | 2 | 1 | 20 | 40 |
| 2025 | 0 | 8 | 5 | 1 | 0 | 14 | 20 |
| 2024 | 1 | 2 | 3 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-84161 | Authenticated remote denial of service through unbounded zlib decompression in storeAnalysisStatisticsPublic exploitEricsson · CodeChecker | Medium4.9 |
| CVE-2026-84164 | Stored XSS in the static HTML report export, because json.dumps does not escape the markup characterEricsson · CodeChecker | None0.0 |
| CVE-2026-84155 | Session Token Remains Valid After Logout in Multi-Worker DeploymentsPublic exploitEricsson · CodeChecker | Medium5.3 |
| CVE-2026-58107 | Authenticated Remote Denial of Service via Unbounded zlib Decompression in massStoreRunPublic exploitEricsson · CodeChecker | Medium5.5 |
| CVE-2026-58106 | Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocationPublic exploitEricsson · CodeChecker | Low2.0 |
| CVE-2026-58108 | Personal access token delete filters on Session columns while deleting from PersonalAccessTokenDBEricsson · CodeChecker | Low1.2 |
| CVE-2025-59181 | Path traversal VulnerabilityEricsson · Packet Core Controller (PCC) | Medium4.8 |
| CVE-2025-59180 | Use of Hard-coded Credentials VulnerabilityEricsson · Packet Core Controller (PCC) | Medium5.1 |
| CVE-2025-59178 | Exposure of Sensitive System Information to an Unauthorized Control Sphere VulnerabilityEricsson · Packet Core Controller (PCC) | Medium4.8 |
| CVE-2025-59177 | Generation of Error Message Containing Sensitive Information VulnerabilityEricsson · Ericsson Packet Core Controller (PCC) | Medium6.8 |
| CVE-2025-59172 | Improper Neutralization of Special Elements used in an OS Command VulnerabilityEricsson · Packet Core Controller (PCC) | High8.5 |
| CVE-2025-59174 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may…Ericsson · Packet Core Controller | High7.1 |
| CVE-2026-25659 | Ericsson Packet Core Gateway (PCG) - Improper handling of missing values VulnerabilityEricsson · Packet Core Gateway (PCG) | High7.1 |
| CVE-2026-25658 | Ericsson Packet Core Gateway (PCG) - Improper handling of missing values VulnerabilityEricsson · Packet Core Gateway (PCG) | High7.1 |
| CVE-2026-25657 | Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure VulnerabilityEricsson · Packet Core Gateway (PCG) | High7.1 |
| CVE-2026-25660 | Authentication bypass for certain API callsEricsson · CodeChecker | Critical9.3 |
| CVE-2024-53828 | Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure VulnerabilityEricsson · Packet Core Controller (PCC) | Medium5.3 |
| CVE-2025-40842 | Ericsson Indoor Connect 8855 - Improper Neutralization of Input During Web Page Generation VulnerabilityEricsson · Indoor Connect 8855 | High8.5 |
| CVE-2025-40841 | Ericsson Indoor Connect 8855 - Cross-Site Request Forgery VulnerabilityEricsson · Indoor Connect 8855 | Medium5.1 |
| CVE-2025-27260 | Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements VulnerabilityEricsson · Indoor Connect 8855 | High7.2 |
| CVE-2025-40843 | Buffer overflow in CodeChecker log commandPublic exploitEricsson · CodeChecker | Medium5.9 |
| CVE-2025-0636 | Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site ControllerEricsson · Site Controller 6610 | High8.4 |
| CVE-2025-27258 | Ericsson Network Manager: escalation of privilege vulnerabilityEricsson · Ericsson Network Manager(ENM) | Medium6.9 |
| CVE-2025-27259 | Ericsson Network Manager: improper neutralization of user controlled inputEricsson · Ericsson Network Manager(ENM) | Low2.4 |
| CVE-2025-40838 | Ericsson Indoor Connect 8855 - Insufficiently Protected Credentials VulnerabilityEricsson · Indoor Connect 8855 | Medium5.1 |
| CVE-2025-40837 | Ericsson Indoor Connect 8855 - Missing Authorization VulnerabilityEricsson · Indoor Connect 8855 | High8.7 |
| CVE-2025-40836 | Ericsson Indoor Connect 8855 - Improper Input Validation VulnerabilityEricsson · Indoor Connect 8855 | High8.7 |
| CVE-2025-27262 | Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an OS Command VulnerabilityEricsson · Indoor Connect 8855 | High8.5 |
| CVE-2025-27261 | Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command VulnerabilityEricsson · Indoor Connect 8855 | High8.7 |
| CVE-2024-25011 | Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information VulnerabilityEricsson · Ericsson Catalog Manager | Medium5.3 |
| CVE-2024-25010 | Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation VulnerabilityEricsson · Ericsson RAN Compute Basebands (all BB variants) | High8.8 |
| CVE-2024-53827 | Ericsson Packet Core Controller (PCC) - Improper Input Validation VulnerabilityEricsson · Packet Core Controller | High7.5 |
| CVE-2025-1300 | Open redirect in CodeChecker web serverEricsson · CodeChecker | Medium6.1 |
| CVE-2024-53829 | Cross-Site Request Forgery in CodeChecker APIPublic exploitEricsson · CodeChecker | High8.2 |
| CVE-2024-10082 | CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows…Ericsson · CodeChecker | High8.7 |
| CVE-2024-10081 | CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the…Public exploitEricsson · CodeChecker | Critical10.0 |
| CVE-2024-25009 | Ericsson Packet Core Controller (PCC) - Improper Input Validation VulnerabilityEricsson · Packet Core Controller | Medium6.5 |
| CVE-2024-25008 | Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation VulnerabilityEricsson · Ericsson RAN Compute Basebands (all BB variants) | Medium6.8 |
| CVE-2023-49793 | Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`Public exploitEricsson · codechecker | Medium6.5 |
| CVE-2024-25007 | Ericsson Network Manager - Improper Neutralization of Formula Elements VulnerabilityEricsson · Ericsson Network Manager | High7.1 |