Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 405,465All CVEsplus 19,159 rejected
- 639Last 24 hours4,914 in the last 7 days
- 18,832Last 30 days1,596 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 29 | 21 | 5 | 0 | 57 | 67 |
| 2025 | 1 | 3 | 4 | 1 | 0 | 9 | 10 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-96596 | erl_tar:extract/2 loops forever on a GNU sparse member with a trailing holeerlang · rebar3 | Medium5.9 |
| CVE-2026-105236 | TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundariesErlang · OTP | Medium6.3 |
| CVE-2026-94200 | TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in sslErlang · OTP | High8.2 |
| CVE-2026-105274 | hex_core decompresses registry and Erlang term API responses without size limitshexpm · hex_core | Low2.1 |
| CVE-2026-103060 | Path traversal in rebar3 via unvalidated dependency app namesPublic exploiterlang · rebar3 | High7.5 |
| CVE-2026-65634 | Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoderErlang · OTP | High8.2 |
| CVE-2026-68956 | SSH daemon allocates unbounded idle session channels, bypassing max_channelsErlang · OTP | High7.1 |
| CVE-2026-89422 | TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extensionErlang · OTP | Critical9.3 |
| CVE-2026-69664 | httpd parks a request worker indefinitely on a malformed chunk size sent after the headersPublic exploitErlang · OTP | High8.7 |
| CVE-2026-70409 | eldap does not bound the port component of a referral URL before integer conversionErlang · OTP | Medium6.3 |
| CVE-2026-70405 | snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fieldsErlang · OTP | Medium6.3 |
| CVE-2026-66835 | httpd mod_auth directory protection bypassed by a doubled slash in the request pathErlang · OTP | High8.2 |
| CVE-2026-73270 | httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystemsErlang · OTP | High8.2 |
| CVE-2026-75538 | A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated PeerErlang · OTP | High8.2 |
| CVE-2026-74994 | inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_authErlang · OTP | Medium6.0 |
| CVE-2026-74835 | inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body ReceptionErlang · OTP | High8.7 |
| CVE-2026-73812 | inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-LengthErlang · OTP | High8.3 |
| CVE-2026-73276 | inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping iErlang · OTP | High8.3 |
| CVE-2026-66357 | inets,httpd:HTTP Request Smuggling via obs-fold Header ContinuationErlang · OTP | High8.3 |
| CVE-2026-59696 | uri_string does not bound the port component of a URI before integer conversionErlang · OTP | Medium6.9 |
| CVE-2026-55951 | httpc memory exhaustion via unbounded response header accumulationErlang · OTP | High8.2 |
| CVE-2026-71380 | httpd applies no timeout while receiving a request body, parking a worker on a stalled clientErlang · OTP | High8.7 |
| CVE-2026-71562 | httpc does not bound server-supplied numeric header values before integer conversionErlang · OTP | Medium6.3 |
| CVE-2026-70399 | httpd does not enforce the documented default max_clients connection limitErlang · OTP | High8.7 |
| CVE-2026-54890 | BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decodingErlang · OTP | High8.2 |
| CVE-2026-59251 | Denial of service via exponential certificate policy tree growth in path validationErlang · OTP | High8.7 |
| CVE-2026-59250 | Megaco flex scanner buffer overflow via oversized property parm nameErlang · OTP | High8.3 |
| CVE-2026-55953 | TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authenticationErlang · OTP | Critical9.1 |
| CVE-2026-55737 | Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoderErlang · OTP | Medium5.1 |
| CVE-2026-47078 | Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypassErlang · OTP | Medium4.8 |
| CVE-2026-42792 | epmd permanent DoS via EMFILE on accept(2) in ertsErlang · OTP | Medium6.3 |
| CVE-2026-58227 | TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chainErlang · OTP | High8.7 |
| CVE-2026-54891 | Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in sslErlang · OTP | Medium6.3 |
| CVE-2026-55950 | DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessionsErlang · OTP | High8.7 |
| CVE-2026-54886 | SSH SFTP server denial of service via extended channel data infinite loopErlang · OTP | Medium5.3 |
| CVE-2026-55952 | TLS 1.3 server denial of service via malformed ClientHello pre-shared key extensionErlang · OTP | High8.2 |
| CVE-2026-54887 | DTLS server cookie bypass during startup window due to empty initial cookie secretErlang · OTP | Medium6.3 |
| CVE-2026-53422 | SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured rootErlang · OTP | Low2.3 |
| CVE-2026-48856 | httpc leaks Authorization header to cross-origin redirect targetsErlang · OTP | High7.1 |
| CVE-2026-48860 | Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_distErlang · OTP | High7.5 |
| CVE-2026-48855 | SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is ConfiguredErlang · OTP | Low2.3 |
| CVE-2026-48858 | ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacksErlang · OTP | Medium6.3 |
| CVE-2026-48859 | SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumerationErlang · OTP | Medium6.3 |
| CVE-2026-49759 | Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crashErlang · OTP | High8.8 |
| CVE-2026-49760 | Stack Buffer Overflow in ei_s_print_term at Very Large IntegerErlang · OTP | Medium6.9 |
| CVE-2026-42790 | nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verificationErlang · OTP | High7.6 |
| CVE-2026-42791 | OCSP responder certificate validity period not checked in public_keyErlang · OTP | Medium6.3 |
| CVE-2026-42789 | Non-CA certificate accepted as intermediate issuer in public_key path validationErlang · OTP | High7.0 |
| CVE-2026-32147 | SFTP chroot bypass via path traversal in SSH_FXP_FSETSTATErlang · OTP | Medium5.3 |
| CVE-2026-28808 | ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)Erlang · OTP | High8.3 |