01 Search console

The CVE corpus, on scope in milliseconds.

419,465 records · updated every 15 minutes

02 Telemetry

Total CVEs419,465

New today132

Known-exploited (KEV)1,768

Sync lag29 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-956526.6Medium—6.6MediumImproper Device Validation Allows Privileged Disk Formatting in TÜBİTAK BİLGEM's pardus-usb-formattertübi̇tak bi̇lgem software technologies research institute pardus-usb-formatter19 MIN AGO

CVE-2026-1230477.5High—7.5HighKeycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Chartseclipse foundation eclipse basyx helm charts23 MIN AGO

CVE-2026-1230196.9Medium—6.9Mediumeosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphereeosphoros-ai db-gpt34 MIN AGO

CVE-2026-12148910.0Critical—10.0CriticalApache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directoryapache software foundation apache juneau39 MIN AGO

CVE-2026-9667710.0Critical—10.0CriticalApache Juneau: Cross-site scripting via unescaped request variables in HTML-doc chromeapache software foundation apache juneau40 MIN AGO

CVE-2026-7311710.0Critical—10.0CriticalApache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request dataapache software foundation apache juneau40 MIN AGO

CVE-2026-7311610.0Critical—10.0CriticalApache Juneau: REST client forwards credentials to a different origin when following HTTP redirectsapache software foundation apache juneau41 MIN AGO

CVE-2026-7310110.0Critical—10.0CriticalApache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaultsapache software foundation apache juneau42 MIN AGO

CVE-2026-7310010.0Critical—10.0CriticalApache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errorsapache software foundation apache juneau44 MIN AGO

CVE-2026-7309910.0Critical—10.0CriticalApache Juneau: Cross-site request forgery via default-enabled content query-parameter body overrideapache software foundation apache juneau45 MIN AGO

CVE-2026-7309810.0Critical—10.0CriticalApache Juneau: Unsafe reflection allows attacker-controlled class initialization during parsingapache software foundation apache juneau45 MIN AGO

CVE-2026-730958.7High—8.7HighApache Juneau: Denial of service via unbounded memory allocation in parsers and REST request handlingapache software foundation apache juneau46 MIN AGO

CVE-2026-1230186.9Medium—6.9Mediumeosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injectioneosphoros-ai db-gpt49 MIN AGO

CVE-2026-1230365.5Medium—5.5MediumA flaw was found in ansible-core. When a task marked `no_log: true` fails, the task result is censored before being emitted, but the `exception` field is retained because it is present in the PRESERVEred hat ansible-core2 HR AGO

CVE-2026-1188698.7High—8.7HighAn OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.shirasagi project shirasagi4 HR AGO

View all 419,465 records

05 Recently added to KEV

KEVCVE-2024-27834apple ios and ipados apple macos apple safari apple tvos apple watchosAdded 2026-11-04

KEVCVE-2026-119977wordpress foundation wordpressAdded 2026-11-03

KEVCVE-2026-118527ivanti connect secureAdded 2026-10-30

KEVCVE-2026-111357ivanti connect secureAdded 2026-10-30

KEVCVE-2026-97229gitlab gitlabAdded 2026-10-29

KEVCVE-2026-76418cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-10-29