Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,542All CVEsplus 19,172 rejected
- 720Last 24 hours4,921 in the last 7 days
- 16,796Last 30 days1,475 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 6 | 0 | 0 | 7 | 7 |
| Title | ||
|---|---|---|
| CVE-2026-75526 | django CMS: Stored XSS in edit-mode plugin exception renderingdjango-cms · django-cms | Medium4.4 |
| CVE-2026-63003 | django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)django-cms · django-cms | Medium6.5 |
| CVE-2026-61663 | django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staffPublic exploitdjango-cms · django-cms | Medium4.3 |
| CVE-2026-54622 | django CMS: Clipboard copy IDOR discloses unauthorized plugin contentdjango-cms · django-cms | Medium6.5 |
| CVE-2026-54624 | django CMS: Structure endpoint bypasses page-view permissiondjango-cms · django-cms | Medium6.5 |
| CVE-2026-54623 | django CMS: Plugin move endpoint allows cyclic reparenting (DoS)django-cms · django-cms | High7.1 |
| CVE-2026-54625 | django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)django-cms · django-cms | Medium4.8 |