01 Search console

The CVE corpus, on scope in milliseconds.

398,834 records · updated every 15 minutes

02 Telemetry

Total CVEs398,834

New today282

Known-exploited (KEV)1,728

Sync lag16 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1022817.5High—7.5HighNest: Remote process termination via a deeply nested microservice message patternnestjs nest16 MIN AGO

CVE-2026-1012025.3Medium—5.3MediumFastStone Image Viewer TGA Image out-of-bounds writefaststone image viewer22 MIN AGO

CVE-2026-1011886.9Medium—6.9MediumNetcore POWER13 ubus routerd.passwd_set password recoverynetcore power1337 MIN AGO

CVE-2026-1022793.1Low—3.1LowLaravel: XSS in Debug Page Informationlaravel framework38 MIN AGO

CVE-2026-1022787.5High—7.5Highbrace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustionjuliangruber brace-expansion40 MIN AGO

CVE-2026-970273.6Low—3.6LowFlatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service filesred hat red hat enterprise linux 10 red hat red hat enterprise linux 7 red hat red hat enterprise linux 8 red hat red hat enterprise linux 940 MIN AGO

CVE-2026-970263.9Low—3.9LowFlatpak: flatpak: world-writable temporary child repositories in system-helper cache pathred hat red hat enterprise linux 10 red hat red hat enterprise linux 7 red hat red hat enterprise linux 8 red hat red hat enterprise linux 940 MIN AGO

CVE-2026-970253.2Low—3.2LowFlatpak: flatpak: world-readable oci authentication token in system-helper cache pathred hat red hat enterprise linux 10 red hat red hat enterprise linux 7 red hat red hat enterprise linux 8 red hat red hat enterprise linux 940 MIN AGO

CVE-2026-1022775.3Medium—5.3Mediumbrace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of servicejuliangruber brace-expansion43 MIN AGO

CVE-2026-1022767.5High—7.5Highbrace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustionjuliangruber brace-expansion46 MIN AGO

CVE-2026-1022655.3Medium—5.3MediumPyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token headerjpadilla pyjwt49 MIN AGO

CVE-2026-1020065.5Medium—5.5MediumVxWorks 7 Memory allocationwind river systems inc vxworks 751 MIN AGO

CVE-2026-1022756.5Medium—6.5MediumPyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusionjpadilla pyjwt51 MIN AGO

CVE-2026-1011879.4Critical—9.4CriticalZiroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injectionziroom zhome a010152 MIN AGO

CVE-2026-91096—Unrated——UnratedIn proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases before v2025.08.18.00) failed to unregister read callbacks forfacebook proxygen52 MIN AGO

View all 398,834 records

05 Recently added to KEV

KEVCVE-2026-88772citrix netscaler adc citrix netscaler gatewayAdded 2026-09-27

KEVCVE-2026-88771citrix netscaler adc citrix netscaler gatewayAdded 2026-09-27

KEVCVE-2026-87902wordpress wordpressAdded 2026-09-25

KEVCVE-2026-67279mikrotik routerosAdded 2026-09-25

KEVCVE-2026-65660microsoft microsoft sharepoint enterprise server 2016 microsoft microsoft sharepoint server 2019 microsoft microsoft sharepoint server subscription editionAdded 2026-09-25

KEVCVE-2026-71362adobe adobe commerce adobe adobe commerce b2b adobe magento open sourceAdded 2026-09-24