02 Telemetry
FEED: ACQUIRING
03 Severity mix
WINDOW: T-30D
04 Latest published
FEED: ACQUIRING
01 Search consoleIDX: 383,003
The CVE corpus, on scope in milliseconds.
383,003 records · updated every 15 minutes
02 Telemetry
FEED: LIVETotal CVEs383,003
New today5
Known-exploited (KEV)1,675
Sync lag18 MIN
03 Severity mix
WINDOW: T-30D
CRITICAL 15%HIGH 45%MEDIUM 36%LOW 3%NONE 0%
04 Latest published
LAST 15 / 15-MIN SYNCCVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-196329.8Critical—9.8CriticalTranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosurecozmoslabs translatepress – translate multilingual sites with ai translation21 MIN AGO CVE-2026-299888.3High—8.3HighA cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker withmilesight am102/102l v2 milesight am103/103l v2 milesight am304l milesight am305l milesight am307 v2 milesight am308 milesight am308l milesight am319 milesight at101 milesight em300-di milesight em300-mcs v3 milesight em300-mld v3 milesight em300-sld v3 milesight em300-th v3 milesight em300-zld v3 milesight em320-th milesight em320-tilt milesight em400-mud lorawan® milesight em400-mud nb-iot46 MIN AGO CVE-2026-802148.6High—8.6HighLibreNMS Virtualisation Discovery Module RCElibrenms librenms1 HR AGO CVE-2026-98052.7Low—2.7LowFMTSWriteUseIntelLib: FMTS SMM IHISI Buffer Overflowinsyde software insydeh2o3 HR AGO CVE-2026-571717.7High—7.7HighTrestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)oscal-compass compliance-trestle4 HR AGO CVE-2026-802029.3Critical—9.3CriticalKimai before 2.56.0 Authorization Bypass via TimesheetVoterkimai kimai4 HR AGO CVE-2026-802012.0Low—2.0LowKimai before 2.53.0 API Token Leakage via Invoice Templatekimai kimai4 HR AGO CVE-2026-802000.0None—0.0NoneKimai before 2.53.0 Open Redirect via RelayStatekimai kimai4 HR AGO CVE-2026-801996.3Medium—6.3MediumKimai before 2.54.0 Username Enumeration via Timing Oraclekimai kimai4 HR AGO CVE-2026-801988.7High—8.7HighKimai before 2.56.0 Information Disclosure via config() Twig Functionkimai kimai4 HR AGO CVE-2026-801978.7High—8.7HighKimai before 2.57.0 Improper Authorization via Favorite Endpointskimai kimai4 HR AGO CVE-2026-801968.7High—8.7HighKimai before 2.58.0 Authentication Bypass via Password Reset Linkkimai kimai4 HR AGO CVE-2026-801958.7High—8.7HighKimai before 2.63.0 Team Membership Removal via APIkimai kimai4 HR AGO CVE-2026-801948.7High—8.7HighKimai before 2.64.0 Missing Authorization via ProjectViewController exportkimai kimai4 HR AGO CVE-2026-801938.7High—8.7HighKimai before 2.62.0 Authorization Bypass via QuickEntrykimai kimai4 HR AGO 05 Recently added to KEV
SRC: CISAKEVCVE-2026-21962oracle corporation oracle http server, oracle weblogic server proxy plug-inAdded 2026-08-24