01 Search console

The CVE corpus, on scope in milliseconds.

418,983 records · updated every 15 minutes

02 Telemetry

Total CVEs418,983

New today21

Known-exploited (KEV)1,767

Sync lag8 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-803358.4High—8.4HighOut-of-bounds Write in Bootloaderunisoc (shanghai) technologies co., ltd. bootloader1 HR AGO

CVE-2026-794057.5High—7.5HighImproper Input Validation in Modem Firmwareunisoc (shanghai) technologies co., ltd. modem1 HR AGO

CVE-2026-1216186.9Medium—6.9MediumLinksys E5600 Factory Quality Control fqc.cgi information disclosurelinksys e56001 HR AGO

CVE-2026-1216178.7High—8.7HighLinksys E5600 Header upload_fw.cgi init_multipart out-of-bounds writelinksys e56001 HR AGO

CVE-2026-1218029.1Critical—9.1Critical@better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), because it signs a caller-supplied state value without checkingbetter-auth better auth1 HR AGO

CVE-2026-1216166.9Medium—6.9MediumLinksys E5600 JSON Request mesh_login.cgi strcpy out-of-bounds writelinksys e56002 HR AGO

CVE-2026-12161510.0Critical—10.0CriticalLinksys E5600 Login mesh_login.cgi improper authenticationlinksys e56002 HR AGO

CVE-2026-847297.2High—7.2HighOut-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or potentially cause a denial-of-service (DoS) via a craftedasus router firmware2 HR AGO

CVE-2026-847308.7High—8.7HighStack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a crafted device name. Refer to the 'asus router firmware2 HR AGO

CVE-2026-1121168.5High—8.5HighAn exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device controlasus system control interface2 HR AGO

CVE-2026-1104646.9Medium—6.9MediumMissing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, viaasus armoury crate2 HR AGO

CVE-2026-1216106.9Medium—6.9Mediumfunadmin Frontend List Endpoint index selectList sql injectionfunadmin2 HR AGO

CVE-2026-12160910.0Critical—10.0CriticalQihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentialsqihoo 360 whole home router m52 HR AGO

CVE-2026-1216086.9Medium—6.9MediumQihoo 360 D603-2/D600-2/D606-6 Timezone Push iscm on_push_message os command injectionqihoo 360 d600-2 qihoo 360 d603-2 qihoo 360 d606-63 HR AGO

CVE-2026-12160710.0Critical—10.0CriticalQihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injectionqihoo 360 d600-2 qihoo 360 d603-2 qihoo 360 d606-6 qihoo 360 d7063 HR AGO

View all 418,983 records

05 Recently added to KEV

KEVCVE-2026-119977wordpress foundation wordpressAdded 2026-11-03

KEVCVE-2026-118527ivanti connect secureAdded 2026-10-30

KEVCVE-2026-111357ivanti connect secureAdded 2026-10-30

KEVCVE-2026-97229gitlab gitlabAdded 2026-10-29

KEVCVE-2026-76418cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-10-29

KEVCVE-2026-46300linux linuxAdded 2026-10-28