01 Search console

The CVE corpus, on scope in milliseconds.

396,351 records · updated every 15 minutes

02 Telemetry

Total CVEs396,351

New today403

Known-exploited (KEV)1,721

Sync lag9 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-159156.2Medium—6.2MediumMultiple Vulnerabilities in IBM Concert Softwareibm concert10 MIN AGO

CVE-2025-127675.3Medium—5.3MediumMultiple Vulnerabilities in IBM Concert Softwareibm concert10 MIN AGO

CVE-2025-360845.9Medium—5.9MediumMultiple Vulnerabilities in IBM Concert Softwareibm concert11 MIN AGO

CVE-2026-751016.0Medium—6.0MediumAuthorization bypass vulnerability in GitHub Enterprise Server allowed reading of private pull request diffs and patches via repository name collisiongithub enterprise server47 MIN AGO

CVE-2026-779127.4High—7.4HighStored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipelinegithub enterprise server47 MIN AGO

CVE-2026-779879.3Critical—9.3CriticalGitHub Enterprise Server notebook viewer vulnerable to Server-side request forgerygithub enterprise server47 MIN AGO

CVE-2026-880205.3Medium—5.3MediumImproper Neutralization of Input During Web Page Generation in OpenPLC Runtime v3autonomy logic openplc runtime50 MIN AGO

CVE-2026-962606.5Medium—6.5MediumMattermost server missing request body size limit on plugin routes allows denial of service by an authenticated usermattermost mattermost56 MIN AGO

CVE-2026-962595.5Medium—5.5MediumMattermost server-side request forgery via OAuth endpoints configurable by a System Administratormattermost mattermost56 MIN AGO

CVE-2026-962697.5High—7.5HighGNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects thegnu emacs58 MIN AGO

CVE-2026-774267.1High—7.1HighUnleash: Missing await on permission check + cross-project IDOR in admin APIunleash unleash59 MIN AGO

CVE-2026-676158.7High—8.7HighopenEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invokerapereo foundation openequella1 HR AGO

CVE-2026-774254.3Medium—4.3MediumUnleash: A project member can reorder activation strategies belonging to any other project / environment (cross-project integrity write), bypassing project RBAC and the audit logunleash unleash1 HR AGO

CVE-2026-910188.7High—8.7HighDouble Free in lwIP (lightweight IP)lwip lwip api1 HR AGO

CVE-2026-769105.3Medium—5.3MediumUnleash: Clone-feature lets a user copy a feature from a project they cannot readunleash unleash1 HR AGO

View all 396,351 records

05 Recently added to KEV

KEVCVE-2026-94127f5 big-ipAdded 2026-09-22

KEVCVE-2026-93952arista networks velocloud orchestrator (vco) on-premAdded 2026-09-22

KEVCVE-2026-93616checkpoint quantum security managementAdded 2026-09-22

KEVCVE-2026-85102checkpoint quantum security gatewayAdded 2026-09-22

KEVCVE-2026-7273zyxel gs1900-10hp firmware zyxel gs1900-16 firmware zyxel gs1900-24 firmware zyxel gs1900-24e firmware zyxel gs1900-24ep firmware zyxel gs1900-24hpv2 firmware zyxel gs1900-48 firmware zyxel gs1900-48hpv2 firmware zyxel gs1900-8 firmware zyxel gs1900-8hp firmwareAdded 2026-09-21

KEVCVE-2026-53266linux linuxAdded 2026-09-18