Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,844All CVEsplus 19,170 rejected
- 369Last 24 hours4,877 in the last 7 days
- 16,881Last 30 days1,489 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 7 | 9 | 0 | 0 | 16 | 34 |
| 2025 | 2 | 4 | 5 | 2 | 0 | 13 | 18 |
| 2024 | 0 | 1 | 0 | 1 | 0 | 2 | 5 |
| 2023 | 0 | 3 | 0 | 0 | 0 | 3 | 3 |
| Title | ||
|---|---|---|
| CVE-2026-34485 | A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)Nokia · Nokia 1830 Global Express (GX) | High7.8 |
| CVE-2026-34484 | A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)Nokia · Nokia 1830 Global Express (GX) | Medium6.7 |
| CVE-2026-40465 | An Open Re-direct Vulnerability in Nokia NSPNokia · NSP | Medium5.3 |
| CVE-2026-40464 | A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSPNokia · NSP | Medium5.4 |
| CVE-2026-40463 | An Insufficient Role-based Access Control Vulnerability in WaveSuiteNokia · WaveSuite | High7.6 |
| CVE-2025-7406 | A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NMNokia · MantaRay NM | High7.8 |
| CVE-2025-24816 | An Improper Access Control vulnerability in Nokia MantaRay NMNokia · MantaRay NM | Medium6.5 |
| CVE-2025-24815 | An unrestricted file upload vulnerability in Nokia MantaRay NMNokia · MantaRay NM | High7.8 |
| CVE-2025-9912 | A local privilege escalation vulnerability in Nokia SR LinuxNokia · Nokia SR Linux | Medium6.3 |
| CVE-2025-10262 | An unsanitized format validation vulnerability in Nokia SR LinuxNokia · SR Linux | Medium6.3 |
| CVE-2025-24819 | A Relative Path Traversal vulnerability in Nokia MantaRay NMNokia · MantaRay NM | Medium5.7 |
| CVE-2025-24818 | An OS Command Injection vulnerability in Nokia MantaRay NMNokia · MantaRay NM | High8.0 |
| CVE-2025-24817 | An OS Command Injection vulnerability in Nokia MantaRay NMNokia · MantaRay NM | High8.0 |
| CVE-2025-10258 | A time-based SQL Injection vulnerability in Infinera DNANokia · Infinera DNA | Medium6.3 |
| CVE-2025-9974 | Insufficient Input Validation on WEBUI in Nokia ONT/Beacon productNokia · Nokia ONT | High8.0 |
| CVE-2025-0980 | JSON RPC authentication bypass in Nokia SR LinuxNokia · SR Linux | Medium6.4 |
| CVE-2023-49565 | Remote Code ExecutionNokia · CBIS,NCS | High8.4 |
| CVE-2023-49564 | Authentication BypassNokia · CBIS,NCS | High8.8 |
| CVE-2025-24938 | Insufficient Validation of Input while user creationNokia · WaveSuite NOC | High8.4 |
| CVE-2025-24937 | Access to local file system and its contentNokia · WaveSuite NOC | Critical9.0 |
| CVE-2025-24936 | Insufficient Validation of Input in the URLNokia · WaveSuite NOC | Critical9.0 |
| CVE-2025-24335 | SOAP message input validation fault could in theory cause OAM service resource exhaustionNokia · Nokia Single RAN | Low2.0 |
| CVE-2025-24334 | The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management networkNokia · Nokia Single RAN | Low3.3 |
| CVE-2025-24333 | Administrative user shell input validation faultNokia · Nokia Single RAN | Medium6.4 |
| CVE-2025-24332 | Authenticated admin user can connect baseband internally from one board to another without needing to re-authenticationNokia · Nokia Single RAN AirScale (Flexi Multiradio is not affected) | High7.1 |
| CVE-2025-24331 | Nokia Single RAN baseband OAM service extensive capabilitiesNokia · Nokia Single RAN | Medium6.4 |
| CVE-2025-24330 | OAM service path traversal issue caused by a crafted SOAP message PlanId field within the RAN management networkNokia · Nokia Single RAN | Medium6.4 |
| CVE-2025-24329 | OAM service path traversal issue caused by a crafted SOAP message archive field within the RAN management networkNokia · Nokia Single RAN | Medium6.4 |
| CVE-2025-24328 | OAM service stack overflow caused by crafted SOAP message within the MNO internal RAN management networkNokia · Nokia Single RAN | Medium4.2 |
| CVE-2023-6729 | Nokia SR OS: File Access Security VulnerabilityNokia · SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS | High7.3 |
| CVE-2023-6728 | Nokia SR OS: BOF File Encryption VulnerabilityNokia · SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS | Low3.3 |
| CVE-2022-2484 | The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could…Nokia · ASIK AirScale | High8.4 |
| CVE-2022-2483 | The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an…Nokia · ASIK AirScale | High8.4 |
| CVE-2022-2482 | A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the file…Nokia · ASIK AirScale | High8.4 |