Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 405,786All CVEsplus 19,170 rejected
- 382Last 24 hours4,897 in the last 7 days
- 16,933Last 30 days1,492 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 5 | 0 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-87901 | Improper sanitization in the registration module allows reflected Cross-Site Scripting.phpBB · phpBB | High8.3 |
| CVE-2026-48613 | SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution…phpBB · phpBB | High7.1 |
| CVE-2026-48612 | Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and cause a victim’s account to be linked…phpBB · phpBB | High8.0 |
| CVE-2026-47366 | Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticated administrator to…phpBB · phpBB | High7.2 |
| CVE-2026-48611 | Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access…Public exploitphpBB · phpBB | Critical9.8 |
| CVE-2026-29199 | phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When force_server_vars is disabled, the servers…phpBB · phpBB | High8.1 |