01 Search console

The CVE corpus, on scope in milliseconds.

422,132 records · updated every 15 minutes

02 Telemetry

Total CVEs422,132

New today329

Known-exploited (KEV)1,772

Sync lag14 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-86531—Unrated——UnratedApache TomEE: DoS via unbounded request body and multipart handling in embedded HTTP serverapache software foundation apache tomee16 MIN AGO

CVE-2026-87758—Unrated——UnratedApache TomEE: Missing TLS hostname verification in ejbds client connectionsapache software foundation apache tomee17 MIN AGO

CVE-2026-97849—Unrated——UnratedApache TomEE: Derby network service listens on all interfacesapache software foundation apache tomee17 MIN AGO

CVE-2026-97867—Unrated——UnratedApache TomEE: Database credential disclosure via remote JNDI lookupapache software foundation apache tomee18 MIN AGO

CVE-2026-1081878.1High—8.1HighOrigin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.zoom communications zoom workplace18 MIN AGO

CVE-2026-97870—Unrated——UnratedApache TomEE: Missing authentication for Hessian endpoints in embedded HTTP serverapache software foundation apache tomee19 MIN AGO

CVE-2026-97872—Unrated——UnratedApache TomEE: Authentication bypass of Hessian EJB endpoints due to ignored security settingsapache software foundation apache tomee19 MIN AGO

CVE-2026-97874—Unrated——UnratedApache TomEE: Authentication bypass for Hessian endpoints in non-root web applicationsapache software foundation apache tomee20 MIN AGO

CVE-2026-1216839.4Critical—9.4CriticalMissing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.ivanti cloud services application20 MIN AGO

CVE-2026-97880—Unrated——UnratedApache TomEE: Authentication bypass in the embedded HTTP server for endpoints protected by HTTP Basic authenticationapache software foundation apache tomee20 MIN AGO

CVE-2026-97881—Unrated——UnratedApache TomEE: Path traversal in embedded HTTP server static resource handlingapache software foundation apache tomee21 MIN AGO

CVE-2026-1081869.6Critical—9.6CriticalImproper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.zoom communications zoom workplace21 MIN AGO

CVE-2026-97888—Unrated——UnratedApache TomEE: Caller identity leaks across requests in embedded HTTP serverapache software foundation apache tomee22 MIN AGO

CVE-2026-97890—Unrated——UnratedApache TomEE: Session fixation in embedded HTTP serverapache software foundation apache tomee22 MIN AGO

CVE-2026-111239—Unrated——UnratedApache TomEE: Code execution by any authenticated user via the SSH administration shellapache software foundation apache tomee23 MIN AGO

View all 422,132 records

05 Recently added to KEV

KEVCVE-2026-123158openbsd opensshAdded 2026-11-09

KEVCVE-2026-116779signalwire freeswitchAdded 2026-11-09

KEVCVE-2026-102895gpustack gpustackAdded 2026-11-09

KEVCVE-2026-19868sonicwall sonicosAdded 2026-11-06

KEVCVE-2024-27834apple ios and ipados apple macos apple safari apple tvos apple watchosAdded 2026-11-04

KEVCVE-2026-119977wordpress foundation wordpressAdded 2026-11-03