Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,567All CVEsplus 19,144 rejected
- 443Last 24 hours3,275 in the last 7 days
- 16,951Last 30 days1,511 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 22 | 0 | 0 | 22 | 22 |
| Title | ||
|---|---|---|
| CVE-2026-18038 | nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosurePublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16199 | nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorizationPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16124 | nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgeryPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16123 | nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.go ToolsInvokeHandler.ServeHTTP authorizationPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16122 | nextlevelbuilder GoClaw exec_approval.go matchesAllowlist authorizationPublic exploitnextlevelbuilder · GoClaw | Medium4.8 |
| CVE-2026-16121 | nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorizationPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16120 | nextlevelbuilder GoClaw exec_approval.go extractBin name resolutionPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-16119 | nextlevelbuilder GoClaw WebSocket Approval Endpoint exec_approval.go RequestApproval authorizationPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-15627 | nextlevelbuilder GoClaw tool.go handleNavigate information disclosurePublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-15626 | nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversalPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-15625 | nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklistPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-15624 | nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgeryPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-14716 | nextlevelbuilder GoClaw WebSocket RPC router.go MethodRouter.Handle authorizationPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-10617 | nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authenticationPublic exploitnextlevelbuilder · GoClaw | Medium6.9 |
| CVE-2026-10616 | nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorizationPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-10583 | nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgeryPublic exploitnextlevelbuilder · GoClaw | Medium5.1 |
| CVE-2026-10219 | nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injectionPublic exploitnextlevelbuilder · GoClaw | Medium6.9 |
| CVE-2026-10218 | nextlevelbuilder GoClaw evolution_handlers.go auth improper authorizationPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-10217 | nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges managementPublic exploitnextlevelbuilder · GoClaw | Medium5.3 |
| CVE-2026-7596 | nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scriptingPublic exploitnextlevelbuilder · ui-ux-pro-max-skill | Medium5.3 |
| CVE-2026-7595 | nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injectionPublic exploitnextlevelbuilder · ui-ux-pro-max-skill | Medium5.3 |
| CVE-2026-7505 | nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorizationPublic exploitnextlevelbuilder · GoClaw | Medium6.9 |