Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,711All CVEsplus 19,156 rejected
- 568Last 24 hours3,405 in the last 7 days
- 17,076Last 30 days1,527 of them critical
- 1,772Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 7 | 14 | 9 | 3 | 0 | 33 | 38 |
| 2025 | 0 | 2 | 0 | 0 | 0 | 2 | 5 |
| 2024 | 1 | 0 | 0 | 0 | 0 | 1 | 3 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 2 |
| 2019 | 0 | 0 | 2 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-55614 | uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matchingopenwrt · uhttpd | Medium6.9 |
| CVE-2026-55612 | uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state resetopenwrt · uhttpd | Low3.7 |
| CVE-2026-55613 | uhttpd: HTTP request smuggling via ubus POST body parse-error desyncPublic exploitopenwrt · uhttpd | Medium6.9 |
| CVE-2026-55606 | odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()Public exploitopenwrt · odhcpd | Medium6.5 |
| CVE-2026-53918 | odhcpd DHCPv6 IA dangling first pointer use-after-freePublic exploitopenwrt · odhcpd | High8.8 |
| CVE-2026-53920 | odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosureopenwrt · odhcpd | High8.7 |
| CVE-2026-53921 | odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)Public exploitopenwrt · odhcpd | Critical9.8 |
| CVE-2026-53922 | odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)Public exploitopenwrt · odhcpd | Medium6.5 |
| CVE-2026-55897 | luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as rootPublic exploitopenwrt · luci | High8.8 |
| CVE-2026-55159 | luci-app-adblock-fast: Delegated `luci-app-adblock-fast` users can reach root command execution by injecting newline-separated cron entriesPublic exploitopenwrt · luci-app-adblock-fast | High8.8 |
| CVE-2026-62381 | luci-lib-px5g 2040-bit Certificate Signing Heap Buffer OverflowPublic exploitopenwrt · luci | Medium6.9 |
| CVE-2026-72842 | OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypassopenwrt · luci | Critical9.4 |
| CVE-2026-72841 | luci-app-openvpn Path Traversal RCE via instance_name2Public exploitopenwrt · luci | Critical9.4 |
| CVE-2026-72840 | OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab WritePublic exploitopenwrt · luci | High8.7 |
| CVE-2026-69096 | OpenWrt luci-app-dockerman Read ACL Remote Code Executionopenwrt · luci | High8.7 |
| CVE-2026-69095 | OpenWrt luci-app-bmx7 Path Traversal via bmx7-infoPublic exploitopenwrt · luci | High8.7 |
| CVE-2026-68583 | luci-app-adblock-fast before 1.2.4-4 Stored XSS via file_url.namePublic exploitopenwrt · luci | Medium5.1 |
| CVE-2026-67352 | luci-app-https-dns-proxy Stored XSS via resolver_urlopenwrt · luci | Medium6.8 |
| CVE-2026-62947 | OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-downloadPublic exploitopenwrt · openwrt | Medium4.9 |
| CVE-2026-62948 | OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UIPublic exploitopenwrt · openwrt | Critical9.6 |
| CVE-2026-62184 | luci-app-banip Log Monitor IP Extraction BypassPublic exploitopenwrt · luci-app-banip | High8.7 |
| CVE-2026-61876 | LuCI DHCPv6 Lease Hostname Stored Cross-Site ScriptingPublic exploitopenwrt · luci | Critical9.4 |
| CVE-2026-61875 | luci-app-upnp Stored XSS via UPnP Port Mapping DescriptionPublic exploitopenwrt · luci | High8.7 |
| CVE-2026-59260 | OpenWrt luci-app-samba4 read ACL remote code execution via smbdPublic exploitopenwrt · luci | High8.7 |
| CVE-2026-55490 | OpenWrt: EAD Integer Underflow → Pre-Auth Denial of ServicePublic exploitopenwrt · openwrt | Medium6.5 |
| CVE-2026-58652 | luci-app-travelmate - Arbitrary Command Execution via UCI Script ParameterPublic exploitopenwrt · luci-app-travelmate | High7.7 |
| CVE-2026-58000 | luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKeyPublic exploitopenwrt · luci-proto-openvpn | High8.7 |
| CVE-2026-57999 | luci-app-tailscale-community - Command Injection via tailscale.do_login RPCPublic exploitopenwrt · luci-app-tailscale-community | High7.7 |
| CVE-2026-32721 | LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modalopenwrt · luci | High8.6 |
| CVE-2026-30874 | OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalationopenwrt · openwrt | Low1.8 |
| CVE-2026-30873 | OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokensopenwrt · openwrt | Low2.4 |
| CVE-2026-30872 | OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookupopenwrt · openwrt | Critical9.5 |
| CVE-2026-30871 | OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Queryopenwrt · openwrt | Critical9.5 |
| CVE-2025-62526 | OpenWrt ubusd vulnerable to heap buffer overflowopenwrt · openwrt | High7.9 |
| CVE-2025-62525 | OpenWrt vulnerable to local privilage escalationopenwrt · openwrt | High7.9 |
| CVE-2024-54143 | openwrt/asu allows build artifact poisoning via truncated SHA-256 hash and command injectionopenwrt · asu | Critical9.3 |
| CVE-2019-5102 | An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server,…OpenWRT · OpenWRT | Medium4.0 |
| CVE-2019-5101 | An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server,…OpenWRT · OpenWRT | Medium4.0 |