01 Search console

The CVE corpus, on scope in milliseconds.

417,982 records · updated every 15 minutes

02 Telemetry

Total CVEs417,982

New today285

Known-exploited (KEV)1,765

Sync lag18 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1056069.5Critical—9.5CriticalJoomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8joomlaboat.com custom tables extension for joomla17 MIN AGO

CVE-2026-1197355.1Medium—5.1MediumMunshi XSS via Purchase Inquiry Thread Renderingpetpooja munshi19 MIN AGO

CVE-2026-1197347.1High—7.1HighMunshi IDOR via Purchase Inquiry Thread Endpointpetpooja munshi21 MIN AGO

CVE-2026-1197337.2High—7.2HighMunshi Missing Authorization in Company Deletion APIpetpooja munshi22 MIN AGO

CVE-2026-1197327.1High—7.1HighMunshi Broken Object Level Authorization via Invoice Deletion APIpetpooja munshi23 MIN AGO

CVE-2026-1197318.7High—8.7HighMunshi Payment Bypass via Unauthenticated Webhook Endpointpetpooja munshi25 MIN AGO

CVE-2026-120656—Unrated——UnratedCVE-2026-120656openkruise kruise-manager35 MIN AGO

CVE-2026-1056055.3Medium—5.3MediumJoomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3dj-extensions.com dj-classifieds extension for joomla50 MIN AGO

CVE-2026-1056049.3Critical—9.3CriticalJoomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3dj-extensions.com dj-classifieds extension for joomla52 MIN AGO

CVE-2026-1056039.4Critical—9.4CriticalJoomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3dj-extensions.com dj-classifieds extension for joomla54 MIN AGO

CVE-2026-819387.7High—7.7HighArbitrary file read via Alertmanager receiver configuration in Grafana Mimirgrafana enterprise metrics (gem) grafana grafana mimir56 MIN AGO

CVE-2026-1204166.9Medium—6.9MediumAndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgeryandyfactory newspaper4k1 HR AGO

CVE-2026-1110488.4High—8.4HighFOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notesfossbilling fossbilling1 HR AGO

CVE-2026-1190859.4Critical—9.4CriticalTemplate injection in the publishing component of awslabs Virtual Engineering Workbenchaws virtual-engineering-workbench1 HR AGO

CVE-2026-120630—Unrated——UnratedCVE-2026-120630crewai crewai1 HR AGO

View all 417,982 records

05 Recently added to KEV

KEVCVE-2026-111357ivanti connect secureAdded 2026-10-30

KEVCVE-2026-97229gitlab gitlabAdded 2026-10-29

KEVCVE-2026-76418cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-10-29

KEVCVE-2026-46300linux linuxAdded 2026-10-28

KEVCVE-2026-41709vmware cloud foundation vmware esx vmware telco cloud platform vmware vsphere foundationAdded 2026-10-28

KEVCVE-2026-48356adobe adobe commerce adobe adobe commerce b2b adobe adobe commerce events adobe magento open sourceAdded 2026-10-27