01 Search console

The CVE corpus, on scope in milliseconds.

424,921 records · updated every 15 minutes

02 Telemetry

Total CVEs424,921

New today381

Known-exploited (KEV)1,779

Sync lag17 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1267925.6Medium—5.6MediumHeap overflow via oversized RSA signature in GCP KMS signing callbackmongodb libmongocrypt driver8 MIN AGO

CVE-2026-12727510.0Critical—10.0CriticalLinksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authenticationlinksys ea810016 MIN AGO

CVE-2026-1208689.3Critical—9.3CriticalMemory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gatewaycitrix netscaler adc citrix netscaler gateway22 MIN AGO

CVE-2026-1272746.3Medium—6.3MediumLinksys EA8100 CheckAdminPassword excessive authenticationlinksys ea810031 MIN AGO

CVE-2026-1272735.3Medium—5.3MediumLinksys EA8100 JNAP API IsAdminPasswordDefault missing authenticationlinksys ea810046 MIN AGO

CVE-2026-1280678.4High—8.4HighPillow: Heap buffer overflow saving TIFF with libtiff when tags override image sizepython-pillow pillow1 HR AGO

CVE-2026-1280668.7High—8.7HighPillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag datapython-pillow pillow1 HR AGO

CVE-2026-1280656.9Medium—6.9Medium@grpc/grpc-js: RBAC override configs in VirtualHost and Route resources are not appliedgrpc grpc-node1 HR AGO

CVE-2026-1263674.8Medium—4.8Medium@grpc/grpc-js: safe_regex incorrectly applies partial string matching for patterns with alternationgrpc grpc-node1 HR AGO

CVE-2026-1263667.5High—7.5Highmsgpack-java JRuby decoder allocates from declared header counts with no cap: 5-byte message forces multi-GiB OOMmsgpack msgpack-ruby1 HR AGO

CVE-2026-1263655.4Medium—5.4MediumAstro: XSS via unescaped code for unsupported languages in @astrojs/prism@astrojs markdoc @astrojs prism withastro astro1 HR AGO

CVE-2026-1263646.3Medium—6.3MediumAstro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystemswithastro astro1 HR AGO

CVE-2026-933332.7Low—2.7LowVault audit device prefix vulnerable to log injectionhashicorp vault hashicorp vault enterprise1 HR AGO

CVE-2026-933356.5Medium—6.5MediumVault vulnerable to ACL deny bypass via trailing slashhashicorp vault hashicorp vault enterprise1 HR AGO

CVE-2026-1263632.3Low—2.3LowAstro: Reflected XSS via unescaped slot names in @astrojs/solid-jswithastro astro1 HR AGO

View all 424,921 records

05 Recently added to KEV

KEVCVE-2026-20320cisco cisco broadworksAdded 2026-11-10

KEVCVE-2026-125350google chromeAdded 2026-11-10

KEVCVE-2026-124194microsoft microsoft 365 apps for enterprise microsoft microsoft office ltsc 2021 microsoft microsoft office ltsc 2024Added 2026-11-10

KEVCVE-2026-116606barracuda networks barracuda email security gateway (esg)Added 2026-11-10

KEVCVE-2026-111793openwave messaging (ireland) limited webtop media transcoderAdded 2026-11-10

KEVCVE-2026-111560barracuda networks barracuda email security gateway (esg) barracuda networks barracuda load balancer application delivery controller (adc) barracuda networks barracuda message archiver (bma) barracuda networks barracuda waf control center (wcc) barracuda networks barracuda web application firewall (waf) barracuda networks barracuda web security gateway (wsg)Added 2026-11-10