01 Search console

The CVE corpus, on scope in milliseconds.

395,650 records · updated every 15 minutes

02 Telemetry

Total CVEs395,650

New today97

Known-exploited (KEV)1,716

Sync lag46 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-9408910.0Critical—10.0CriticalD-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflowd-link dir-868l49 MIN AGO

CVE-2026-940515.3Medium—5.3Medium0717376 cowork_bench pdf-tools-mcp server.py ControlFlowNode server-side request forgery0717376 cowork_bench1 HR AGO

CVE-2026-940505.3Medium—5.3MediumD-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosured-link dir-x1860z1 HR AGO

CVE-2026-940495.3Medium—5.3Medium06ketan slideshot renderer.ts render_slides path traversal06ketan slideshot1 HR AGO

CVE-2026-940485.1Medium—5.1MediumCodeAstro QR Code Attendance Management System UserController.php save privileges managementcodeastro qr code attendance management system2 HR AGO

CVE-2026-940475.3Medium—5.3Mediumsamanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges managementsamanhappy mcphub2 HR AGO

CVE-2026-940465.3Medium—5.3Medium0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal0215andrewfeng ace-mcp2 HR AGO

CVE-2026-940455.1Medium—5.1Mediumnewbee-ltd newbee-mall Goods Save Endpoint UploadController.java cross site scriptingnewbee-ltd newbee-mall3 HR AGO

CVE-2026-940446.9Medium—6.9Medium03-lovepreetSingh MCP route.ts create_file path traversal03-lovepreetsingh mcp3 HR AGO

CVE-2026-940436.9Medium—6.9MediumFree5GC Gmm handler.go race conditionfree5gc3 HR AGO

CVE-2026-888579.4Critical—9.4CriticalJoomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7ordasoft.com ordasoft joomla gallery extension for joomla ordasoft.com ordasoft joomla gallery free extension for joomla3 HR AGO

CVE-2026-888549.3Critical—9.3CriticalJoomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7ordasoft.com ordasoft joomla gallery extension for joomla ordasoft.com ordasoft joomla gallery free extension for joomla3 HR AGO

CVE-2026-888558.6High—8.6HighJoomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7ordasoft.com ordasoft joomla gallery extension for joomla ordasoft.com ordasoft joomla gallery free extension for joomla3 HR AGO

CVE-2026-888569.4Critical—9.4CriticalJoomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7ordasoft.com ordasoft joomla gallery extension for joomla ordasoft.com ordasoft joomla gallery free extension for joomla3 HR AGO

CVE-2026-940425.3Medium—5.3MediumAdithyaYelloju Restaurant Management System add_table.php mysqli_query sql injectionadithyayelloju restaurant management system3 HR AGO

View all 395,650 records

05 Recently added to KEV

KEVCVE-2026-53266linux linuxAdded 2026-09-18

KEVCVE-2025-39964linux linuxAdded 2026-09-18

KEVCVE-2025-39682linux linuxAdded 2026-09-18

KEVCVE-2026-87886acronis acronis backup extension for plesk acronis acronis backup plugin for cpanel & whm acronis acronis backup plugin for directadminAdded 2026-09-16

KEVCVE-2026-76460cisco cisco identity services engine software cisco cisco ise passive identity connectorAdded 2026-09-16

KEVCVE-2026-58704google androidAdded 2026-09-16