Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,220All CVEsplus 19,142 rejected
- 264Last 24 hours3,269 in the last 7 days
- 16,861Last 30 days1,541 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 17 | 8 | 2 | 0 | 27 | 39 |
| 2025 | 0 | 1 | 8 | 0 | 0 | 9 | 12 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2018 | 0 | 3 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-111233 | Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.phpPublic exploitNetgate · pfSense CE | Low2.3 |
| CVE-2026-111232 | Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator ColorPublic exploitNetgate · pfSense CE | Medium4.8 |
| CVE-2026-111230 | Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URLPublic exploitNetgate · pfSense CE | Medium6.9 |
| CVE-2026-111228 | Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.phpPublic exploitNetgate · pfSense CE | Medium5.1 |
| CVE-2026-111227 | Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.phpPublic exploitNetgate · pfSense CE | Medium5.1 |
| CVE-2026-111226 | Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.phpPublic exploitNetgate · pfSense CE | High8.6 |
| CVE-2026-111225 | Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.shPublic exploitNetgate · pfSense CE | Low2.3 |
| CVE-2026-111224 | Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.shPublic exploitNetgate · pfSense CE | High7.7 |
| CVE-2026-111223 | Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login BannerPublic exploitNetgate · pfSense CE | High8.6 |
| CVE-2026-111222 | Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone SettingPublic exploitNetgate · pfSense CE | High7.5 |
| CVE-2026-111220 | Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpidPublic exploitNetgate · pfSense CE | High8.6 |
| CVE-2026-111219 | Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server UsernamePublic exploitNetgate · pfSense CE | High7.5 |
| CVE-2026-111218 | Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper LimitersPublic exploitNetgate · pfSense CE | High8.6 |
| CVE-2026-111217 | Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHIDPublic exploitNetgate · pfSense CE | High8.6 |
| CVE-2026-111216 | Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IPPublic exploitNetgate · pfSense CE | High8.6 |
| CVE-2026-111215 | Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent InterfacePublic exploitNetgate · pfSense CE | High8.6 |
| CVE-2026-111214 | Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.phpPublic exploitNetgate · pfSense CE | High8.6 |
| CVE-2026-110908 | Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An…Netgate · pfSense-pkg-frr | High8.8 |
| CVE-2026-97730 | In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data…Netgate · pfSense Plus | High8.5 |
| CVE-2026-56128 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_schedule_edit.phpNetgate · pfSense Plus | Medium5.1 |
| CVE-2026-56127 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.phpNetgate · pfSense Plus | Medium5.1 |
| CVE-2026-56126 | pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.phpNetgate · pfSense Plus | Medium5.1 |
| CVE-2026-67189 | pfSense Plus/CE Stored XSS via Traffic Graphs PTR RecordNetgate · pfSense Plus | Medium5.3 |
| CVE-2016-20058 | Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege EscalationPublic exploitNetgate · NETGATE AMITI Antivirus | High8.5 |
| CVE-2016-20057 | NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege EscalationPublic exploitNetgate · NETGATE Registry Cleaner | High8.5 |
| CVE-2019-25271 | NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service PathPublic exploitNETGATE · Data Backup | High8.5 |
| CVE-2019-25269 | Amiti Antivirus 25.0.640 - Unquoted Service Path VulnerabilityPublic exploitNetgate · Amiti Antivirus | High8.5 |
| CVE-2025-12490 | Netgate pfSense CE Suricata Path Traversal Remote Code Execution VulnerabilityNetgate · pfSense | High8.8 |
| CVE-2025-34178 | Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site ScriptingNetgate · pfSense CE | Medium5.1 |
| CVE-2025-34177 | Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site ScriptingNetgate · pfSense CE | Medium5.1 |
| CVE-2025-34176 | Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information DisclosureNetgate · pfSense CE | Medium5.3 |
| CVE-2025-34175 | Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site ScriptingNetgate · pfSense CE | Medium5.1 |
| CVE-2025-34174 | Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site ScriptingNetgate · pfSense CE | Medium5.1 |
| CVE-2025-34173 | Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information DisclosureNetgate · pfSense CE | Medium5.3 |
| CVE-2025-34172 | Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site ScriptingNetgate · pfSense CE | Medium4.8 |
| CVE-2025-53392 | In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal.…Public exploitNetgate · pfSense | Medium5.0 |
| CVE-2018-4021 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The…Netgate · Netgate pfSense | High7.2 |
| CVE-2018-4020 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The…Netgate · Netgate pfSense | High7.2 |
| CVE-2018-4019 | An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The…Netgate · Netgate pfSense | High7.2 |