01 Search console
The CVE corpus, on scope in milliseconds.
414,874 records · updated every 15 minutes
02 Telemetry
Total CVEs414,874
New today35
Known-exploited (KEV)1,758
Sync lag31 MIN
03 Severity mix
04 Latest published
CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-1061746.7Medium—A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of thefortinet fortios37 MIN AGO
CVE-2026-1059465.3Medium—Out-of-bounds read vulnerability in NTLM authentication handling impacts Qtqt qt46 MIN AGO
CVE-2026-1033253.7Low—TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC Bypassunknown tiendacrypto para woocommerce49 MIN AGO
CVE-2026-1033595.3Medium—PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgeryunknown paydunya woocommerce payment gateway49 MIN AGO
CVE-2026-1109106.3Medium—qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injectionljharb qs49 MIN AGO
CVE-2026-758918.8High—Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpointthemeum kirki – freeform page builder, website builder & customizer51 MIN AGO
CVE-2026-103312—Unrated—Payment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callbackunknown payment integration wompi1 HR AGO
CVE-2026-103332—Unrated—Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Keyunknown payex payment gateway for woocommerce1 HR AGO
CVE-2026-1174724.3Medium—URL prefix handling permits API key read-scope bypass in Psono Serveresaqa gmbh psono1 HR AGO
CVE-2026-1174715.4Medium—User-controlled Duo host permits authenticated SSRF in Psono Serveresaqa gmbh psono1 HR AGO
CVE-2026-1174706.5Medium—WebAuthn assertion replay permits second-factor bypass in Psono Serveresaqa gmbh psono1 HR AGO
CVE-2026-1174695.4Medium—File-transfer type confusion permits unauthorized repository writes in Psono Serveresaqa gmbh psono1 HR AGO
CVE-2026-1174686.5Medium—Device-code claim permits restricted token escalation in Psono Serveresaqa gmbh psono1 HR AGO
CVE-2026-1118207.2High—Analytics Insights <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Titledeconf analytics insights – google analytics dashboard for wordpress2 HR AGO
CVE-2026-887816.8Medium—Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent systemasus motherboards firmware5 HR AGO