01 Search console
The CVE corpus, on scope in milliseconds.
400,892 records · updated every 15 minutes
02 Telemetry
Total CVEs400,892
New today374
Known-exploited (KEV)1,733
Sync lag25 MIN
03 Severity mix
04 Latest published
CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-951029.3Critical—Monta monta.app Missing Authentication for Critical Functionmonta monta.app9 MIN AGO
CVE-2026-1050433.6Low—MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.mathworks simulink10 MIN AGO
CVE-2026-973638.7High—Monta monta.app Improper Restriction of Excessive Authentication Attemptsmonta monta.app12 MIN AGO
CVE-2026-934746.9Medium—Monta monta.app Insufficiently Protected Credentialsmonta monta.app16 MIN AGO
CVE-2026-1040555.3Medium—Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charmcanonical postgresql-operator1 HR AGO
CVE-2026-759379.4Critical—OS Command Injection in Digi Accelerated Linux (DAL OS)digi international anywhereusb plus family digi international connect ez family digi international connect it family digi international digi 54xx family digi international digi 63xx family digi international digi ix14 digi international digi lr54 family digi international ex family digi international ix family digi international tx family digi international xbee hive border router for wi-sun digi1 HR AGO
CVE-2026-820457.1High—UTMStack < 11.2.16 JPQL Injection via searchPropertyValuesutmstack utmstack1 HR AGO
CVE-2026-1048745.3Medium—Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtractionaio-libs multidict1 HR AGO
CVE-2026-820446.3Medium—UTMStack < 11.2.16 Server-Side Request Forgery via downloadPdfutmstack utmstack1 HR AGO
CVE-2026-820436.9Medium—UTMStack < 11.2.16 Account Enumeration via Password Reset Endpointutmstack utmstack1 HR AGO
CVE-2026-820429.3Critical—UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilterutmstack utmstack1 HR AGO
CVE-2026-820416.5Medium—UTMStack < 11.2.16 Missing Authorization via Command WebSocketutmstack utmstack1 HR AGO
CVE-2026-1040199.3Critical—OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studioaws sagemaker-distribution1 HR AGO
CVE-2026-1048737.6High—LangGraph SDK custom auth silently ignores actions= on resource decoratorslangchain-ai langgraph1 HR AGO