Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,593All CVEsplus 19,144 rejected
- 468Last 24 hours3,298 in the last 7 days
- 16,977Last 30 days1,512 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 236 | 781 | 764 | 67 | 0 | 1,848 | 6,267 |
| 2025 | 21 | 111 | 434 | 40 | 0 | 606 | 4,419 |
| 2024 | 12 | 90 | 377 | 25 | 0 | 504 | 3,813 |
| 2023 | 6 | 86 | 297 | 25 | 0 | 414 | 3,309 |
| 2022 | 3 | 30 | 318 | 36 | 0 | 387 | 2,895 |
| 2021 | 4 | 73 | 486 | 43 | 0 | 606 | 2,508 |
| 2020 | 16 | 112 | 382 | 48 | 0 | 558 | 1,902 |
| 2019 | 11 | 86 | 352 | 22 | 0 | 471 | 1,344 |
| 2018 | 11 | 100 | 376 | 31 | 0 | 518 | 873 |
| 2017 | 13 | 77 | 248 | 17 | 0 | 355 | 355 |
| Title | ||
|---|---|---|
| CVE-2026-118904 | IBM webMethods Integration Server is affected by vulnerabilty in backup code validation during 2FA Authentication.IBM · webMethods Integration Server | High8.1 |
| CVE-2026-96146 | Multiple vulnerabilities previously addressed in IBM SevOne Network Performance ManagementIBM · SevOne Network Performance Management | High7.5 |
| CVE-2026-95867 | Multiple vulnerabilities previously addressed in IBM SevOne Network Performance ManagementIBM · SevOne Network Performance Management | Medium6.7 |
| CVE-2026-17427 | This Power System update is being released to addressIBM · OPENBMC | Medium6.5 |
| CVE-2026-17426 | This Power System update is being released to addressIBM · OPENBMC | Medium6.5 |
| CVE-2026-16697 | This Power System update is being released to addressIBM · OPENBMC | Medium6.5 |
| CVE-2026-16682 | This Power System update is being released to addressIBM · OPENBMC | Medium6.5 |
| CVE-2026-97677 | Langflow OSS is affected by multiple vulnerabilitiesIBM · Langflow OSS | High8.1 |
| CVE-2026-9764 | IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server executionIBM · Bob Shell | High8.8 |
| CVE-2026-93879 | Hibernate Validator is affected by an expression language injection vulnerabilityIBM · Hibernate Validator | High7.5 |
| CVE-2026-93005 | Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026IBM · Process Mining | Medium6.5 |
| CVE-2026-8860 | IBM Verify Directory is affected by multiple vulnerabilitiesIBM · Security Verify Directory | Medium6.5 |
| CVE-2026-8642 | IBM Verify Directory is affected by multiple vulnerabilitiesIBM · Security Verify Directory | Medium4.3 |
| CVE-2026-8640 | IBM Verify Directory is affected by multiple vulnerabilitiesIBM · Security Verify Directory | Low3.5 |
| CVE-2026-8639 | IBM Verify Directory is affected by multiple vulnerabilitiesIBM · Security Verify Directory | High8.8 |
| CVE-2026-84237 | IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM · Guardium Data Protection | Low3.1 |
| CVE-2026-84229 | IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM · Guardium Data Protection | Medium6.5 |
| CVE-2026-84228 | IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM · Guardium Data Protection | Low3.1 |
| CVE-2026-84030 | IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM · Guardium Data Protection | Medium5.6 |
| CVE-2026-82830 | IBM Guardium Data Protection is affected by multiple vulnerabilitiesIBM · Guardium Data Protection | Medium6.7 |
| CVE-2026-81542 | DataStage on Cloud Pak for Data has several vulnerabilitiesIBM · DataStage on Cloud Pak for Data | Medium6.4 |
| CVE-2026-81209 | Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File GatewayIBM · Sterling B2B Integrator | Medium4.9 |
| CVE-2026-80435 | DataStage on Cloud Pak for Data has several vulnerabilitiesIBM · DataStage on Cloud Pak for Data | Medium5.0 |
| CVE-2026-78636 | IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilitiesIBM · WebSphere Application Server - Liberty | Medium4.3 |
| CVE-2026-78537 | IBM Guardium Key Lifecycle Manager is affected by a security vulnerabilityIBM · Guardium Key Lifecycle Manager | Medium6.8 |
| CVE-2026-77153 | IBM i is Affected By Missing Authorization Vulnerability in Host-Based Printer Subsystem []IBM · i | Medium4.8 |
| CVE-2026-75879 | Multiple vulnerabilities in IBM Content Navigator and FasterXML jackson-databind in IBM Content NavigatorIBM · Content Navigator | Medium4.3 |
| CVE-2026-6715 | Multiple Vulnerabilities in IBM Concert SoftwareIBM · Concert | Critical9.8 |
| CVE-2026-3684 | Vulnerabilities exists in IBM Cloud Pak for Data SystemIBM · Cloud Pak for Data System | Medium6.5 |
| CVE-2026-2700 | Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant CartridgeIBM · watsonx Orchestrate Cartridge for Cloud Pak for Data | Medium4.3 |
| CVE-2026-2477 | Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant CartridgeIBM · watsonx Orchestrate Cartridge for Cloud Pak for Data | Medium6.5 |
| CVE-2026-19307 | Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File GatewayIBM · Sterling B2B Integrator | Medium4.3 |
| CVE-2026-19133 | TS4500 Tape Library addresses security vulnerabilityIBM · Storage TS4500 Library | High8.1 |
| CVE-2026-18893 | CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilitiesIBM · CockroachDB PostgreSQL for IBM VPC | High7.1 |
| CVE-2026-18546 | CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilitiesIBM · CockroachDB PostgreSQL for IBM VPC | Medium5.4 |
| CVE-2026-18668 | Protection Mechanism Failure vulnerability affects IBM Sterling File GatewayIBM · Sterling File Gateway | Medium6.5 |
| CVE-2026-18525 | IBM Sterling Secure Proxy is vulnerable to multiple issuesIBM · Secure Proxy | Medium4.9 |
| CVE-2026-18484 | IBM ContextForge MCP Gateway is affected by a denial-of-service via tool name collision through slug normalizationIBM · ContextForge MCP Gateway | Medium6.5 |
| CVE-2026-18196 | IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injectionIBM · App Connect Enterprise | Medium5.4 |
| CVE-2026-18195 | IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injectionIBM · App Connect Enterprise | Medium4.2 |
| CVE-2026-18194 | IBM App Connect Enterprise is vulnerable to a clickjacking attackIBM · App Connect Enterprise | Low2.5 |
| CVE-2026-18093 | IBM App Connect Enterprise is vulnerable to a credential exposureIBM · App Connect Enterprise | High7.5 |
| CVE-2026-17466 | IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Limiting, and Weak Password Policy vulnerabilitiesIBM · Optim | Critical9.1 |
| CVE-2026-17437 | IBM App Connect Enterprise is vulnerable to an arbitrary file writeIBM · App Connect Enterprise | Medium5.5 |
| CVE-2026-16699 | Vulnerability exists in IBM Netezza ApplianceIBM · Netezza Appliance | Medium6.5 |
| CVE-2026-16433 | DataStage on Cloud Pak for Data has several vulnerabilitiesIBM · DataStage on Cloud Pak for Data | Medium6.5 |
| CVE-2026-16427 | DataStage on Cloud Pak for Data has several vulnerabilitiesIBM · DataStage on Cloud Pak for Data | Medium6.5 |
| CVE-2026-16325 | DataStage on Cloud Pak for Data has several vulnerabilitiesIBM · DataStage on Cloud Pak for Data | Medium4.4 |
| CVE-2026-15266 | Multiple Vulnerabilities in IBM Concert SoftwareIBM · Concert | Critical9.8 |
| CVE-2026-14963 | IBM Cognos Command Center has addressed vulnerabilitiesIBM · Cognos Command Center | Medium4.3 |