01 Search console

The CVE corpus, on scope in milliseconds.

418,502 records · updated every 15 minutes

02 Telemetry

Total CVEs418,502

New today330

Known-exploited (KEV)1,765

Sync lag7 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-442679.8Critical—9.8CriticalElo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitterenspirit elo16 MIN AGO

CVE-2026-442669.8Critical—9.8CriticalElo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labelsenspirit elo17 MIN AGO

CVE-2026-1168455.3Medium—5.3MediumNetBox from 2.9.0 before 4.7.4 Authorization Bypass via BulkComponentCreateViewnetbox-community netbox19 MIN AGO

CVE-2026-442657.4High—7.4HighElo: Code injection in Elo backends via unvalidated emission of programmatic AST fieldsenspirit elo21 MIN AGO

CVE-2026-1212635.3Medium—5.3MediumphpMyAdmin MoTranslator Loader.php getTranslator path traversalphpmyadmin motranslator53 MIN AGO

CVE-2026-1216286.3Medium—6.3MediumBagisto before 2.3.16 and 2.4.x before 2.4.1 Race Condition in Coupon Usage Accountingbagisto bagisto54 MIN AGO

CVE-2026-1216275.3Medium—5.3Mediumbuku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URLjarun buku54 MIN AGO

CVE-2026-1216266.3Medium—6.3MediumGNU Gatekeeper before 5.16 Out-of-Bounds Read in H.460.24 RTCP Probe Handlerwillamowius gnugk54 MIN AGO

CVE-2026-1216256.3Medium—6.3MediumGNU Gatekeeper before 5.16 Out-of-Bounds Read via RTCP SDES Parsingwillamowius gnugk54 MIN AGO

CVE-2026-1216247.6High—7.6HighNanosystems Supremo before 5.0.2.3874 Improper TLS Certificate Validationnanosystems supremo54 MIN AGO

CVE-2026-1216312.3Low—2.3LowLightdash 0.2609.0 before 3.137.0 Cross-Project IDOR via RenameService Dashboard Endpointslightdash lightdash1 HR AGO

CVE-2026-1195095.3Medium—5.3MediumWordPress ClickCease Click Fraud Protection plugin <= 3.3.0 - Broken Access Control vulnerabilityeranfl clickcease click fraud protection1 HR AGO

CVE-2026-970724.3Medium—4.3MediumWordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilitymycred mycred1 HR AGO

CVE-2026-1141875.3Medium—5.3MediumWordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilitywpvibes anywhere elementor1 HR AGO

CVE-2026-1212626.9Medium—6.9MediumphpMyAdmin SQL-Parser ExplainStatement.php parse type conversionphpmyadmin sql-parser1 HR AGO

View all 418,502 records

05 Recently added to KEV

KEVCVE-2026-111357ivanti connect secureAdded 2026-10-30

KEVCVE-2026-97229gitlab gitlabAdded 2026-10-29

KEVCVE-2026-76418cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-10-29

KEVCVE-2026-46300linux linuxAdded 2026-10-28

KEVCVE-2026-41709vmware cloud foundation vmware esx vmware telco cloud platform vmware vsphere foundationAdded 2026-10-28

KEVCVE-2026-48356adobe adobe commerce adobe adobe commerce b2b adobe adobe commerce events adobe magento open sourceAdded 2026-10-27