01 Search console

The CVE corpus, on scope in milliseconds.

419,051 records · updated every 15 minutes

02 Telemetry

Total CVEs419,051

New today89

Known-exploited (KEV)1,767

Sync lag24 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1144218.3High—8.3HighEmpty initial password permits GINA account takeoverseppmail ag seppmail secure email gateway (seg)27 MIN AGO

CVE-2026-1144206.9Medium—6.9MediumLDAP wildcard injection exposes GINA recipient accountsseppmail ag seppmail secure email gateway (seg)29 MIN AGO

CVE-2026-1144268.7High—8.7HighPre-authentication upload parsing permits resource exhaustionseppmail ag seppmail secure email gateway (seg)37 MIN AGO

CVE-2026-1144259.2Critical—9.2CriticalForged LFT metadata permits arbitrary file read and deletionseppmail ag seppmail secure email gateway (seg)40 MIN AGO

CVE-2026-1144249.2Critical—9.2CriticalCode execution through double evaluation in address replacement rulesseppmail ag seppmail secure email gateway (seg)42 MIN AGO

CVE-2026-197313.3Low—3.3LowPath Traversal in TÜBİTAK BİLGEM's İmzagertübi̇tak bi̇lgem software technologies research institute i̇mzager54 MIN AGO

CVE-2026-197213.3Low—3.3LowXXE in TÜBİTAK BİLGEM's İmzagertübi̇tak bi̇lgem software technologies research institute i̇mzager57 MIN AGO

CVE-2026-576667.1High—7.1HighWordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerabilityaguila technologies wp customer area1 HR AGO

CVE-2026-1193667.1High—7.1HighWordPress wpDiscuz plugin <= 7.6.73 - Cross Site Scripting (XSS) vulnerabilityadvancedcoding wpdiscuz1 HR AGO

CVE-2026-620077.1High—7.1HighWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerabilityunlimited elements unlimited elements for elementor (free widgets, addons, templates)1 HR AGO

CVE-2026-548617.1High—7.1HighWordPress WP Customer Area plugin <= 8.4.1 - Cross Site Scripting (XSS) vulnerabilityaguila technologies wp customer area1 HR AGO

CVE-2026-621267.5High—7.5HighWordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerabilityminiorange saml sp single sign on1 HR AGO

CVE-2026-577755.3Medium—5.3MediumWordPress Simple Cloudflare Turnstile plugin <= 1.44.1 - Broken Authentication vulnerabilityrelywp simple cloudflare turnstile1 HR AGO

CVE-2026-576397.1High—7.1HighWordPress WP Booking System plugin <= 2.1.0.6 - Cross Site Scripting (XSS) vulnerabilityroland murg wp booking system1 HR AGO

CVE-2026-1194777.1High—7.1HighWordPress WP Photo Album Plus plugin <= 9.3.05.003 - Cross Site Scripting (XSS) vulnerabilityjacob n. breetvelt wp photo album plus1 HR AGO

View all 419,051 records

05 Recently added to KEV

KEVCVE-2026-119977wordpress foundation wordpressAdded 2026-11-03

KEVCVE-2026-118527ivanti connect secureAdded 2026-10-30

KEVCVE-2026-111357ivanti connect secureAdded 2026-10-30

KEVCVE-2026-97229gitlab gitlabAdded 2026-10-29

KEVCVE-2026-76418cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-10-29

KEVCVE-2026-46300linux linuxAdded 2026-10-28