01 Search console

The CVE corpus, on scope in milliseconds.

410,349 records · updated every 15 minutes

02 Telemetry

Total CVEs410,349

New today410

Known-exploited (KEV)1,748

Sync lag7 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1123608.9High—8.9HighNetis EAP930 CGI Endpoint debug return200 backdoornetis eap9308 MIN AGO

CVE-2026-1124058.7High—8.7HighPillow: NULL pointer dereference in Image.merge via an unvalidated band 0python-pillow pillow8 MIN AGO

CVE-2026-1124048.8High—8.8HighPillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixelspython-pillow pillow10 MIN AGO

CVE-2026-1058157.1High—7.1HighCredential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C210tp-link systems inc. tapo c210 v3.611 MIN AGO

CVE-2026-1058145.3Medium—5.3MediumOrder-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C210tp-link systems inc. tapo c210 v3.611 MIN AGO

CVE-2026-1124039.2Critical—9.2CriticalPillow: Heap buffer overflow in ImagingJpegDecodepython-pillow pillow16 MIN AGO

CVE-2026-1124028.7High—8.7HighPillow: Double free in ImagingScaleAffine on calloc failure via Image.transformpython-pillow pillow19 MIN AGO

CVE-2026-1123978.7High—8.7HighPillow: Out-of-bounds access in _imagingmorph on a zero-width imagepython-pillow pillow20 MIN AGO

CVE-2026-1123928.2High—8.2HighPillow: NULL dereference in ImagingExpand via rank filters on zero-size imagespython-pillow pillow21 MIN AGO

CVE-2026-1124016.9Medium—6.9MediumPillow: Quadratic GIF comment concatenation allows DoS in Image.open()python-pillow pillow23 MIN AGO

CVE-2026-1123582.1Low—2.1LowTiBillet Lespass APIv1 serializers.py get_img_from_url server-side request forgerytibillet lespass23 MIN AGO

CVE-2026-1124008.7High—8.7HighPillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoSpython-pillow pillow25 MIN AGO

CVE-2026-1123998.7High—8.7HighPillow: APNG background disposal allocates full canvas before decompression bomb checkpython-pillow pillow28 MIN AGO

CVE-2026-1123989.2Critical—9.2CriticalPillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code executionpython-pillow pillow31 MIN AGO

CVE-2026-539958.8High—8.8HighMLflow 3.17.1 Path Traversal via Trace ID APImlflow mlflow33 MIN AGO

View all 410,349 records

05 Recently added to KEV

KEVCVE-2026-102764beyondtrust remote supportAdded 2026-10-16

KEVCVE-2025-61624fortinet fortios fortinet fortipam fortinet fortiproxy fortinet fortiswitchmanagerAdded 2026-10-16

KEVCVE-2026-21589atlassian bamboo data center atlassian bitbucket data center atlassian confluence data center atlassian crowd data center atlassian crucible data center atlassian fisheye data center atlassian jira service management data center atlassian jira software data centerAdded 2026-10-15

KEVCVE-2026-76519cisco cisco secure emailAdded 2026-10-14

KEVCVE-2026-105134ahsay ahsaycbsAdded 2026-10-14

KEVCVE-2026-105133ahsay ahsaycbsAdded 2026-10-14