Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 404,876All CVEsplus 19,157 rejected
  • 2,093Last 24 hours4,681 in the last 7 days
  • 18,905Last 30 days1,625 of them critical
  • 1,779Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20260113001414

Latest CVEs

14 CVEs, newest first

CVEs, newest first
Title
CVE-2026-16198
Sipeed PicoClaw First Run Setup access_control.go authentication bypassPublic exploitSipeed · PicoClaw
Medium6.3
CVE-2026-16197
Sipeed PicoClaw Group Message feishu_64.go handleMessageReceive authorizationPublic exploitSipeed · PicoClaw
Medium5.3
CVE-2026-16196
Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgeryPublic exploitSipeed · PicoClaw
Medium5.3
CVE-2026-16195
Sipeed PicoClaw Group Message wecom.go dispatchIncoming authorizationPublic exploitSipeed · PicoClaw
Medium5.3
CVE-2026-16085
Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control spherePublic exploitSipeed · PicoClaw
Medium4.8
CVE-2026-16084
Sipeed PicoClaw web.go web_fetch server-side request forgeryPublic exploitSipeed · PicoClaw
Medium6.9
CVE-2026-16083
Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replayPublic exploitSipeed · PicoClaw
Medium6.9
CVE-2026-16082
Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctouPublic exploitSipeed · PicoClaw
Medium4.8
CVE-2026-16081
Sipeed PicoClaw auth.go cross-site request forgeryPublic exploitSipeed · PicoClaw
Medium5.3
CVE-2026-15320
Sipeed PicoClaw pico.go rt.ReloadConfig authorizationPublic exploitSipeed · PicoClaw
Medium5.3
CVE-2026-15319
Sipeed PicoClaw Launcher access_control.go IPAllowlist access controlPublic exploitSipeed · PicoClaw
Medium6.9
CVE-2026-15318
Sipeed PicoClaw MQTT Channel mqtt.go authorizationPublic exploitSipeed · PicoClaw
Medium5.3
CVE-2026-15317
Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgeryPublic exploitSipeed · PicoClaw
Medium5.3
CVE-2026-32296
Sipeed NanoKVM unauthenticated Wi-Fi configuration endpointSipeed · NanoKVM
High8.8