02 Telemetry
FEED: ACQUIRING
03 Severity mix
WINDOW: T-30D
04 Latest published
FEED: ACQUIRING
01 Search consoleIDX: 377,352
The CVE corpus, on scope in milliseconds.
377,352 records · updated every 15 minutes
02 Telemetry
FEED: LIVETotal CVEs377,352
New today0
Known-exploited (KEV)1,665
Sync lag8 HR
03 Severity mix
WINDOW: T-30D
CRITICAL 15%HIGH 44%MEDIUM 37%LOW 4%
04 Latest published
LAST 15 / 15-MIN SYNCCVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-742506.3Medium–6.3MediumIn OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.openstack ironic8 HR AGO CVE-2026-636502.0Low–2.0LowOpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup fieldopenvpn openvpn8 HR AGO CVE-2026-636494.1Medium–4.1MediumThe Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and loadopenvpn openvpn8 HR AGO CVE-2026-694147.8High–7.8HighMicrosoft Defender Elevation of Privilege Vulnerabilitymicrosoft microsoft malware protection engine9 HR AGO CVE-2026-736839.2Critical–9.2CriticalLaravel Socialite Facebook Provider Authentication Bypass via Nonce Replaylaravel socialite9 HR AGO CVE-2026-736828.7High–8.7HighSemaphore prior to version 2.18.20 OS Command Injection via git_url Repository Handlingsemaphoreui semaphore9 HR AGO CVE-2026-505237.8High–7.8HighMicrosoft PowerShell Remote Code Execution Vulnerabilitymicrosoft powershell 7.4 microsoft powershell 7.5 microsoft powershell 7.69 HR AGO CVE-2026-742484.3Medium–4.3MediumOpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion ofopenstack octavia10 HR AGO CVE-2026-673665.3Medium–5.3MediumJoomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11icagenda.com icagenda extension for joomla10 HR AGO CVE-2026-715705.1Medium–5.1MediumJoomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11icagenda.com icagenda extension for joomla10 HR AGO CVE-2026-715718.6High–8.6HighJoomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11icagenda.com icagenda extension for joomla10 HR AGO CVE-2026-673659.2Critical–9.2CriticalJoomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11icagenda.com icagenda extension for joomla11 HR AGO CVE-2026-199107.5High–7.5HighPAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerabilitypax technology q8011 HR AGO CVE-2026-199087.1High–7.1HighPAX Technology Q80 XCB Daemon Missing Authentication Vulnerabilitypax technology q8011 HR AGO CVE-2026-199097.5High–7.5HighPAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerabilitypax technology q8011 HR AGO 05 Recently added to KEV
SRC: CISAKEVCVE-2026-68820microsoft windows 10 version 1607 microsoft windows 10 version 1809 microsoft windows 10 version 21h2 microsoft windows 10 version 22h2 microsoft windows 11 version 23h2 microsoft windows 11 version 24h2 microsoft windows 11 version 25h2 microsoft windows 11 version 26h1 microsoft windows server 2012 microsoft windows server 2012 (server core installation) microsoft windows server 2012 r2Added 2026-08-11 KEVCVE-2026-20349cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-08-11 KEVCVE-2026-8037progress software ecs connections manager progress software loadmaster progress software moveit waf progress software object scale connection managerAdded 2026-08-07