Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,853All CVEsplus 19,170 rejected
- 377Last 24 hours4,885 in the last 7 days
- 16,889Last 30 days1,489 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 15 | 6 | 1 | 0 | 25 | 61 |
| 2025 | 0 | 28 | 6 | 0 | 0 | 34 | 36 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2023 | 0 | 0 | 1 | 1 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-126759 | H3C ICG2000 Unified Communication Gateway Web Management check.j missing authenticationH3C · ICG2000 Unified Communication Gateway | Medium6.9 |
| CVE-2026-112373 | H3C Magic NX15 usrlist sub_416874 stack-based overflowPublic exploitH3C · Magic NX15 | High7.1 |
| CVE-2026-112372 | H3C Magic NX15 upload importprofile path traversalPublic exploitH3C · Magic NX15 | Medium5.1 |
| CVE-2026-112371 | H3C Magic NX15 RPC esps write code injectionPublic exploitH3C · Magic NX15 | Critical9.4 |
| CVE-2026-112370 | H3C Magic NX15 usrlist sub_416874 os command injectionPublic exploitH3C · Magic NX15 | Critical9.4 |
| CVE-2026-65197 | H3C G3/G5 HDM Firmware Verification Key ReplacementH3C · HDM Family-A G5 | Low3.1 |
| CVE-2023-54405 | H3C CVM Unauthenticated File Upload via fileUpload/upload TokenPublic exploitH3C · CVM | Critical9.3 |
| CVE-2026-18902 | H3C NX15 esps repeaterproc command injectionPublic exploitH3C · NX15 | High8.6 |
| CVE-2026-18901 | H3C NX15 Web API esps service.add routinePublic exploitH3C · NX15 | High8.6 |
| CVE-2026-18900 | H3C NX15 Backend RPC esps file.exec os command injectionPublic exploitH3C · NX15 | High8.6 |
| CVE-2026-18814 | H3C NX15 esps reload.reload_config command injectionPublic exploitH3C · NX15 | High8.6 |
| CVE-2026-18813 | H3C NX15 esps delete command injectionPublic exploitH3C · NX15 | High8.6 |
| CVE-2026-18812 | H3C NX15 esps esps.ipv6.wan command injectionPublic exploitH3C · NX15 | High8.6 |
| CVE-2026-18811 | H3C NX15 esps add command injectionPublic exploitH3C · NX15 | High8.6 |
| CVE-2026-18810 | H3C NX15 networkSetup missing authenticationPublic exploitH3C · NX15 | Medium6.9 |
| CVE-2026-15907 | H3C SecPath F1000-C8300 g=log_fw_nbc_mail_jsondata sql injectionPublic exploitH3C · SecPath F1000-C8300 | Medium6.9 |
| CVE-2026-15479 | H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recoveryPublic exploitH3C · NX15 | Medium6.9 |
| CVE-2026-10259 | H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflowPublic exploitH3C · Magic B0 | High8.7 |
| CVE-2026-9393 | H3C Magic B0 aspForm Edit_BasicSSID_5G buffer overflowPublic exploitH3C · Magic B0 | High8.7 |
| CVE-2026-8764 | H3C Magic B3 aspForm UpdateWanParams buffer overflowPublic exploitH3C · Magic B3 | High8.6 |
| CVE-2026-6581 | H3C Magic B1 aspForm SetMobileAPInfoById buffer overflowPublic exploitH3C · Magic B1 | High8.7 |
| CVE-2026-6563 | H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflowPublic exploitH3C · Magic B1 | High8.7 |
| CVE-2026-6560 | H3C Magic B0 aspForm Edit_BasicSSID buffer overflowPublic exploitH3C · Magic B0 | High8.7 |
| CVE-2026-3943 | H3C ACG1000-AK230 aaa_portal_auth_local_submit command injectionPublic exploitH3C · ACG1000-AK230 | Medium6.9 |
| CVE-2026-3701 | H3C Magic B1 aspForm Edit_BasicSSID_5G buffer overflowPublic exploitH3C · Magic B1 | High8.7 |
| CVE-2025-14196 | H3C Magic B1 aspForm sub_44de0 buffer overflowPublic exploitH3C · Magic B1 | High8.7 |
| CVE-2025-14015 | H3C Magic B0 aspForm EditWlanMacList buffer overflowPublic exploitH3C · Magic B0 | High8.7 |
| CVE-2025-10942 | H3C Magic B3 aspForm EditMacList buffer overflowPublic exploitH3C · Magic B3 | High8.7 |
| CVE-2025-8907 | H3C M2 NAS Webserver Configuration unnecessary privilegesPublic exploitH3C · M2 NAS | High7.3 |
| CVE-2025-6091 | H3C GR-3000AX aspForm UpdateIpv6Params buffer overflowPublic exploitH3C · GR-3000AX | High8.7 |
| CVE-2025-6090 | H3C GR-5400AX aspForm UpdateIpv6params buffer overflowPublic exploitH3C · GR-5400AX | High8.7 |
| CVE-2025-5162 | H3C SecCenter SMP-E1114P02 importFile unrestricted uploadPublic exploitH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5161 | H3C SecCenter SMP-E1114P02 download operationDailyOut path traversalPublic exploitH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5160 | H3C SecCenter SMP-E1114P02 download path traversalPublic exploitH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5159 | H3C SecCenter SMP-E1114P02 download path traversalPublic exploitH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5158 | H3C SecCenter SMP-E1114P02 downloadSoftware path traversalPublic exploitH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5157 | H3C SecCenter SMP-E1114P02 fileContent path traversalH3C · SecCenter SMP-E1114P02 | Medium5.3 |
| CVE-2025-5156 | H3C GR-5400AX aspForm EditWlanMacList buffer overflowPublic exploitH3C · GR-5400AX | High8.7 |
| CVE-2025-4998 | H3C Magic R200G HTTP POST Request aspForm EditWlanMacList denial of servicePublic exploitH3C · Magic R200G | High7.1 |
| CVE-2025-4997 | H3C R2+ProG HTTP POST Request aspForm SetAPInfoById denial of servicePublic exploitH3C · R2+ProG | High7.1 |
| CVE-2025-4446 | H3C GR-5400AX aspForm Edit_List_SSID buffer overflowPublic exploitH3C · GR-5400AX | High8.6 |
| CVE-2025-4440 | H3C GR-1800AX aspForm EnableIpv6 buffer overflowPublic exploitH3C · GR-1800AX | High8.6 |
| CVE-2025-3854 | H3C GR-3000AX HTTP POST Request aspForm Edit_List_SSID buffer overflowPublic exploitH3C · GR-3000AX | High8.6 |
| CVE-2025-3546 | H3C Magic BE18000 HTTP POST Request getLanguage FCGI_CheckStringIfContainsSemicolon command injectionPublic exploitH3C · Magic NX15 | High8.6 |
| CVE-2025-3545 | H3C Magic BE18000 HTTP POST Request setLanguage FCGI_CheckStringIfContainsSemicolon command injectionPublic exploitH3C · Magic NX15 | High8.6 |
| CVE-2025-3544 | H3C Magic BE18000 HTTP POST Request getCapabilityWeb FCGI_CheckStringIfContainsSemicolon command injectionPublic exploitH3C · Magic NX15 | High8.6 |
| CVE-2025-3543 | H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request setsyncpppoecfg FCGI_WizardProtoProcess command injectionPublic exploitH3C · Magic NX15 | High8.6 |
| CVE-2025-3542 | H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injectionPublic exploitH3C · Magic NX15 | High8.6 |
| CVE-2025-3541 | H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injectionPublic exploitH3C · Magic NX15 | High8.6 |
| CVE-2025-3540 | H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injectionPublic exploitH3C · Magic NX15 | High8.6 |