synced 12 MIN AGO
01 Search console

The CVE corpus, on scope in milliseconds.

390,833 records · updated every 15 minutes

02 Telemetry

Total CVEs390,833
New today34
Known-exploited (KEV)1,708
Sync lag15 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-906196.9Medium6.9Medium0x4m4 HexStrike AI Execute Endpoint hexstrike_server.py os command injection0x4m4 hexstrike ai29 MIN AGO
CVE-2026-906186.9Medium6.9MediumGH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injectiongh05tcrew pentestagent44 MIN AGO
CVE-2026-906176.9Medium6.9MediumGH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injectiongh05tcrew pentestagent59 MIN AGO
CVE-2026-906155.3Medium5.3MediumSourceCodester Class and Exam Timetabling System subject1.php cross site scriptingsourcecodester class and exam timetabling system1 HR AGO
CVE-2026-906145.3Medium5.3MediumFedML-AI FedML MQTT+S3 Communication Backend remote_storage.py S3Storage.read_model deserializationfedml-ai fedml1 HR AGO
CVE-2026-906134.8Medium4.8MediumGPAC MP4Box stbl_read.c stbl_GetSampleInfos assertiongpac1 HR AGO
CVE-2026-906124.8Medium4.8MediumGPAC MP4Box scene_dump.c gf_sm_dump_command_list assertiongpac1 HR AGO
CVE-2026-906114.8Medium4.8MediumGPAC MP4Box loader_xmt.c xmt_parse_element assertiongpac2 HR AGO
CVE-2026-906104.8Medium4.8MediumGPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-readgpac2 HR AGO
CVE-2026-906094.8Medium4.8MediumGPAC MP4Box vrml_tools.c null pointer dereferencegpac2 HR AGO
CVE-2026-906089.4Critical9.4CriticalTotolink A3002MU boa formPortFw buffer overflowtotolink a3002mu2 HR AGO
CVE-2026-906079.4Critical9.4CriticalTotolink A3002MU boa formNewSchedule buffer overflowtotolink a3002mu3 HR AGO
CVE-2026-389242.9Low2.9LowIn Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation,oraios ai serena3 HR AGO
CVE-2026-339703.5Low3.5LowAn issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, andsamsung exynos 850 firmware3 HR AGO
CVE-2026-339682.8Low2.8LowAn issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, a Time-of-Check Time-of-Use (TOCTOU) race condition leadssamsung exynos 1330 firmware3 HR AGO

05 Recently added to KEV

KEVCVE-2026-84869connectwise screenconnectAdded 2026-09-11
KEVCVE-2026-42018jfrog artifactoryAdded 2026-09-11
KEVCVE-2026-42016jfrog artifactoryAdded 2026-09-11
KEVCVE-2026-86060mikrotik routerosAdded 2026-09-10
KEVCVE-2026-67277mikrotik routerosAdded 2026-09-10
KEVCVE-2026-87491google chromeAdded 2026-09-09