01 Search console

The CVE corpus, on scope in milliseconds.

409,281 records · updated every 15 minutes

02 Telemetry

Total CVEs409,281

New today99

Known-exploited (KEV)1,748

Sync lag28 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1118654.8Medium—4.8MediumTHU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injectionthu-mig yoloe35 MIN AGO

CVE-2026-1108824.3Medium—4.3MediumWordPress SMS Alert Order Notifications plugin <= 4.0.1 - Broken Access Control vulnerabilitycozy vision technologies pvt. ltd. sms alert order notifications2 HR AGO

CVE-2026-1119346.3Medium—6.3MediumCoder before 2.34.7 IP Spoofing via X-Forwarded-For Headercoder coder2 HR AGO

CVE-2026-1119336.3Medium—6.3MediumCoder before 2.34.2 User Enumeration via Login Placeholder Hashcoder coder2 HR AGO

CVE-2026-1119324.8Medium—4.8MediumCoder before 2.34.2 Stored HTML Injection via Appearance Settingscoder coder2 HR AGO

CVE-2026-1119315.3Medium—5.3MediumCoder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxycoder coder2 HR AGO

CVE-2026-1119305.3Medium—5.3MediumCoder from 2.26.0 before 2.34.8 Information Disclosure via Workspace ACL Endpointcoder coder2 HR AGO

CVE-2026-1119296.0Medium—6.0MediumCoder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPCcoder coder2 HR AGO

CVE-2026-1119285.3Medium—5.3MediumCoder 2.0.0 before 2.34.8 Authorization Bypass via User-Level ACL in RBAC Policycoder coder2 HR AGO

CVE-2026-1119278.7High—8.7HighCoder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Matchcoder coder2 HR AGO

CVE-2026-1119264.8Medium—4.8MediumCoder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifestcoder coder2 HR AGO

CVE-2026-1119248.7High—8.7HighFleet before 4.83.0 Denial of Service via Unbounded Gzip Decompressionfleetdm fleet2 HR AGO

CVE-2026-1119238.7High—8.7HighFleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsingfleetdm fleet2 HR AGO

CVE-2026-1119227.2High—7.2HighVikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost Originsgo-vikunja vikunja2 HR AGO

CVE-2026-1119215.3Medium—5.3MediumVikunja 0.13.0 before 2.7.0 Incorrect Authorization in Link Share Deletiongo-vikunja vikunja2 HR AGO

View all 409,281 records

05 Recently added to KEV

KEVCVE-2026-102764beyondtrust remote supportAdded 2026-10-16

KEVCVE-2025-61624fortinet fortios fortinet fortipam fortinet fortiproxy fortinet fortiswitchmanagerAdded 2026-10-16

KEVCVE-2026-21589This CVE's publication may have been a false positive or a mistake. As a result, we have rejected this record.Added 2026-10-15

KEVCVE-2026-76519cisco cisco secure emailAdded 2026-10-14

KEVCVE-2026-105134ahsay ahsaycbsAdded 2026-10-14

KEVCVE-2026-105133ahsay ahsaycbsAdded 2026-10-14