01 Search console

The CVE corpus, on scope in milliseconds.

425,692 records · updated every 15 minutes

02 Telemetry

Total CVEs425,692

New today766

Known-exploited (KEV)1,779

Sync lag35 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-715198.6High—8.6HighPrestaShop Webservice API Broken Access Control via Customer Endpointprestashop prestashop1 HR AGO

CVE-2026-715318.6High—8.6HighPrestaShop Webservice API Authorization Bypass via id_shop Parameterprestashop prestashop1 HR AGO

CVE-2026-1291806.9Medium—6.9Mediumprojectworlds Visitor Management System actionpage.php mysqli_query sql injectionprojectworlds visitor management system1 HR AGO

CVE-2026-1281347.8High—7.8HighNLTK dot2img runs Graphviz 'dot' without the trusted-exec chokepoint, enabling local code execution via a writable PATH elementnltk nltk1 HR AGO

CVE-2026-1291736.9Medium—6.9MediumStirling-Tools Stirling-PDF Participant Details Endpoint WorkflowParticipantController.java session timeoutstirling-tools stirling-pdf1 HR AGO

CVE-2026-821026.4Medium—6.4MediumDataStage on Cloud Pak for Data has vulnerabilities due to open source softwareibm datastage on cloud pak for data1 HR AGO

CVE-2026-918686.5Medium—6.5MediumIBM Security QRadar EDR Improper Access Controlibm security qradar edr1 HR AGO

CVE-2026-918698.1High—8.1HighIBM Security QRadar EDR Improper Restriction of Excessive Authentication Attemptsibm security qradar edr1 HR AGO

CVE-2026-1091587.5High—7.5HighIBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Insertion of Sensitive Information into Log Fileibm app connect enterprise certified containers operands ibm app connect operator1 HR AGO

CVE-2026-1157888.1High—8.1HighIBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Log Forgingibm app connect enterprise certified containers operands ibm app connect operator2 HR AGO

CVE-2025-438748.7High—8.7High: Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controlsjohnson controls istar edge g2 johnson controls istar ultra johnson controls istar ultra g2 johnson controls istar ultra g2 se johnson controls istar ultra se2 HR AGO

CVE-2026-1144686.0Medium—6.0MediumIBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands Hard-coded Credentialsibm app connect enterprise certified containers operands ibm app connect operator2 HR AGO

CVE-2025-537006.3Medium—6.3MediumCWE‑922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE,johnson controls istar edge g2 johnson controls istar ultra johnson controls istar ultra g2 johnson controls istar ultra g2 se johnson controls istar ultra se2 HR AGO

CVE-2026-55143.3Low—3.3LowIBM Bob is vulnerable to unauthorized session token exposure due to improper handling of authentication provider session informationibm bob2 HR AGO

CVE-2025-536997.0High—7.0HighMissing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTARjohnson controls istar edge g2 johnson controls istar ultra johnson controls istar ultra g2 johnson controls istar ultra g2 se johnson controls istar ultra se2 HR AGO

View all 425,692 records

05 Recently added to KEV

KEVCVE-2026-123039checkpoint quantum security gateway checkpoint quantum security managementAdded 2026-11-13

KEVCVE-2026-114713unrealircd unrealircdAdded 2026-11-13

KEVCVE-2026-20320cisco cisco broadworksAdded 2026-11-10

KEVCVE-2026-125350google chromeAdded 2026-11-10

KEVCVE-2026-124194microsoft microsoft 365 apps for enterprise microsoft microsoft office ltsc 2021 microsoft microsoft office ltsc 2024Added 2026-11-10

KEVCVE-2026-116606barracuda networks barracuda email security gateway (esg)Added 2026-11-10