Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 406,523All CVEsplus 19,172 rejected
  • 715Last 24 hours4,922 in the last 7 days
  • 16,819Last 30 days1,476 of them critical
  • 1,781Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260341088

Latest CVEs

8 CVEs, newest first

CVEs, newest first
Title
CVE-2026-73974
linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)Public exploitLinuxfabrik · monitoring-plugins
Medium5.5
CVE-2026-73973
Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE)Public exploitLinuxfabrik · monitoring-plugins
Medium5.5
CVE-2026-55426
linuxfabrik-lib: Local privilege escalation using embedded commandPublic exploitLinuxfabrik · monitoring-plugins
High7.8
CVE-2026-53759
linuxfabrik-lib: Insecure creation of SQLite databasesPublic exploitLinuxfabrik · monitoring-plugins
Low2.0
CVE-2026-52817
Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalationPublic exploitLinuxfabrik · monitoring-plugins
High7.0
CVE-2026-67436
Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-* pluginsLinuxfabrik · monitoring-plugins
High8.3
CVE-2026-67435
linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirectLinuxfabrik · monitoring-plugins
Medium6.0
CVE-2026-67433
Linuxfabrik monitoring-plugins: Symlink following in logfile legacy database migrationLinuxfabrik · monitoring-plugins
Medium5.8