01 Search console
The CVE corpus, on scope in milliseconds.
413,012 records · updated every 15 minutes
02 Telemetry
Total CVEs413,012
New today150
Known-exploited (KEV)1,754
Sync lag21 MIN
03 Severity mix
04 Latest published
CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-1052708.7High—Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustionarekinath esaml dropbox esaml handnot2 esaml22 MIN AGO
CVE-2026-1141824.3Medium—WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Broken Access Control vulnerabilityideabox creations powerpack addons for elementor27 MIN AGO
CVE-2026-1128434.3Medium—WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerabilitywp chill strong testimonials27 MIN AGO
CVE-2026-1128265.3Medium—WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerabilityelightup falcon – wordpress optimizations & tweaks28 MIN AGO
CVE-2026-1141805.3Medium—WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerabilitywpmet metform29 MIN AGO
CVE-2026-1118475.4Medium—WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerabilitykings plugins marketking30 MIN AGO
CVE-2026-1141778.8High—WordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerabilityxpro xpro elementor addons30 MIN AGO
CVE-2026-1141755.4Medium—WordPress eRoom plugin <= 1.7.1 - Settings Change vulnerabilitydigitalme eroom32 MIN AGO
CVE-2026-1128676.5Medium—WordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerabilityh5p h5p34 MIN AGO
CVE-2026-1141846.5Medium—WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerabilitywpvibes elementor addon elements35 MIN AGO
CVE-2026-103634—Unrated—Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketchapache software foundation apache datasketches38 MIN AGO
CVE-2026-1144605.3Medium—Mod_qos: query truncation during json body merging permits security-rule bypasspbuchbinder mod_qos43 MIN AGO
CVE-2026-1144593.7Low—Mod_qos: out-of-bounds reads in response-body substring matchingpbuchbinder mod_qos43 MIN AGO
CVE-2026-1144585.9Medium—Mod_qos: undersized connection-monitor scratch array permits heap buffer overflowpbuchbinder mod_qos43 MIN AGO
CVE-2026-1144573.7Low—Mod_qos: missing nul termination in json value escaping permits out-of-bounds readspbuchbinder mod_qos43 MIN AGO
05 Recently added to KEV
KEVCVE-2026-106931eg secure solutions inc. siteguard server edition for apache httpd eg secure solutions inc. siteguard server edition for apache httpd on freebsd eg secure solutions inc. siteguard server edition for iis eg secure solutions inc. siteguard server edition for nginx eg secure solutions inc. siteguard server edition for nginx on freebsdAdded 2026-10-20