01 Search console
The CVE corpus, on scope in milliseconds.
422,142 records · updated every 15 minutes
02 Telemetry
Total CVEs422,142
New today339
Known-exploited (KEV)1,772
Sync lag16 MIN
03 Severity mix
04 Latest published
CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-1054266.7Medium—Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.ivanti endpoint manager mobile18 MIN AGO
CVE-2026-1231815.5Medium—A path traversal vulnerability in Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files withivanti sentry20 MIN AGO
CVE-2026-1231795.5Medium—An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a local authenticated attacker to cause a denial ofivanti sentry22 MIN AGO
CVE-2026-1240381.0Low—Uncontrolled XML entity expansion in the Flock Installer app for Androidflock flock installer app26 MIN AGO
CVE-2026-1056696.7Medium—Argument injection in Ivanti Sentry before version 10.8.3 and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries.ivanti sentry26 MIN AGO
CVE-2026-1240378.2High—Information exposure in Flock Safety Platform public access-list sign-upflock flock safety platform28 MIN AGO
CVE-2026-1054257.2High—OS command injection in Ivanti Sentry before versions 10.7.4, 10.8.3, and 11.0.0 as well as in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker withivanti endpoint manager mobile ivanti sentry29 MIN AGO
CVE-2026-1240367.6High—Cross-organization access to saved-search alerts in FlockOSflock flockos30 MIN AGO
CVE-2026-1121918.6High—In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs (identity/v1, and identity/v2 since 5.5.0, provided by org.eclipse.kura.rest.identity.provider) do not check identity andeclipse foundation eclipse kura31 MIN AGO
CVE-2026-86336—Unrated—Apache TomEE: EJB method authorization is silently skipped on JDK 21+apache software foundation apache tomee34 MIN AGO
CVE-2026-86531—Unrated—Apache TomEE: DoS via unbounded request body and multipart handling in embedded HTTP serverapache software foundation apache tomee34 MIN AGO
CVE-2026-87758—Unrated—Apache TomEE: Missing TLS hostname verification in ejbds client connectionsapache software foundation apache tomee35 MIN AGO
CVE-2026-97849—Unrated—Apache TomEE: Derby network service listens on all interfacesapache software foundation apache tomee36 MIN AGO
CVE-2026-97867—Unrated—Apache TomEE: Database credential disclosure via remote JNDI lookupapache software foundation apache tomee36 MIN AGO
CVE-2026-1081878.1High—Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.zoom communications zoom workplace37 MIN AGO
05 Recently added to KEV
KEVCVE-2024-27834apple ios and ipados apple macos apple safari apple tvos apple watchosAdded 2026-11-04