Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,830All CVEsplus 19,170 rejected
- 358Last 24 hours4,873 in the last 7 days
- 16,869Last 30 days1,488 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 15 | 3 | 1 | 0 | 19 | 20 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-47711 | BACnet Stack: Stack buffer overflow in Loop internal ReadProperty path via Life_Safety_Zone.accepted-modes on the default BACnet/IP serverbacnet-stack · bacnet-stack | High8.6 |
| CVE-2026-47710 | BACnet Stack: Loop reference to long Structured View description causes stack-buffer-overflowbacnet-stack · bacnet-stack | High8.2 |
| CVE-2026-47259 | BACnet Stack: Stack-based buffer overflow in Notification Class RemoveListElement recipient-list decodingbacnet-stack · bacnet-stack | High8.2 |
| CVE-2026-47258 | BACnet Stack: Stack-based buffer overflow in Notification Class AddListElement recipient-list decodingbacnet-stack · bacnet-stack | High8.2 |
| CVE-2026-47257 | BACnet Stack: ReinitializeDevice ENDRESTORE can delete existing objects on an empty restore file and still return successPublic exploitbacnet-stack · bacnet-stack | High8.1 |
| CVE-2026-47217 | BACnet Stack: Channel member self-reference causes uncontrolled recursion and stack overflow in default BACnet/IP serverbacnet-stack · bacnet-stack | High7.5 |
| CVE-2026-46677 | BACnet Stack: Client-Side Out-of-Bounds Read in AtomicReadFile-ACK Record-Access Handling via RecordCount / fileData[] Mismatchbacnet-stack · bacnet-stack | Medium6.5 |
| CVE-2026-46676 | BACnet Stack: Uninitialized Value Use in AtomicReadFile-ACK Record-Access Encoder Causes Response Corruption and Conditional Information Disclosurebacnet-stack · bacnet-stack | Medium5.3 |
| CVE-2026-46674 | BACnet Stack: Out-of-Bounds Read in AtomicWriteFile Record Decoder via Unbounded returnedRecordCountPublic exploitbacnet-stack · bacnet-stack | High7.5 |
| CVE-2026-45341 | BACnet Stack: NULL pointer dereference in bacnet_device_object_reference_decode() when WriteProperty updates Structured View subordinate-listbacnet-stack · bacnet-stack | High7.5 |
| CVE-2026-45265 | Atomic-Read-File RecordCount Stack-Based Out-of-Bounds Write in bacnet-stackbacnet-stack · bacnet-stack | High8.2 |
| CVE-2026-52786 | BACnet Stack: malicious ReadPropertyMultiple-ACK with excessive properties causes global-buffer-overflow in ProcessRPMData()bacnet-stack · bacnet-stack | High7.1 |
| CVE-2026-41503 | BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag ParserPublic exploitbacnet-stack · bacnet-stack | High8.7 |
| CVE-2026-41502 | BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID DecoderPublic exploitbacnet-stack · bacnet-stack | High8.7 |
| CVE-2026-41475 | BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag ParserPublic exploitbacnet-stack · bacnet-stack | High8.7 |
| CVE-2026-40279 | BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`Public exploitbacnet-stack · bacnet-stack | Low3.7 |
| CVE-2026-26264 | BACnet Stack WriteProperty decoding length underflow leads to OOB read and crashPublic exploitbacnet-stack · bacnet-stack | High7.8 |
| CVE-2026-21878 | BACnet Stack Improperly Limits Pathnames to a Restricted DirectoryPublic exploitbacnet-stack · bacnet-stack | High7.5 |
| CVE-2026-21870 | The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_stringbacnet-stack · bacnet-stack | Medium5.5 |
| CVE-2025-66624 | BACnet-stack MS/TP reply matcher OOB readPublic exploitbacnet-stack · bacnet-stack | High7.5 |