01 Search console

The CVE corpus, on scope in milliseconds.

413,012 records · updated every 15 minutes

02 Telemetry

Total CVEs413,012

New today150

Known-exploited (KEV)1,754

Sync lag26 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1052708.7High—8.7HighUnbounded atom creation while parsing SAML messages in esaml allows atom table exhaustionarekinath esaml dropbox esaml handnot2 esaml29 MIN AGO

CVE-2026-1141824.3Medium—4.3MediumWordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Broken Access Control vulnerabilityideabox creations powerpack addons for elementor34 MIN AGO

CVE-2026-1128434.3Medium—4.3MediumWordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerabilitywp chill strong testimonials34 MIN AGO

CVE-2026-1128265.3Medium—5.3MediumWordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerabilityelightup falcon – wordpress optimizations & tweaks35 MIN AGO

CVE-2026-1141805.3Medium—5.3MediumWordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerabilitywpmet metform36 MIN AGO

CVE-2026-1118475.4Medium—5.4MediumWordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerabilitykings plugins marketking37 MIN AGO

CVE-2026-1141778.8High—8.8HighWordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerabilityxpro xpro elementor addons37 MIN AGO

CVE-2026-1141755.4Medium—5.4MediumWordPress eRoom plugin <= 1.7.1 - Settings Change vulnerabilitydigitalme eroom39 MIN AGO

CVE-2026-1128676.5Medium—6.5MediumWordPress H5P plugin <= 1.17.9 - Cross Site Scripting (XSS) vulnerabilityh5p h5p41 MIN AGO

CVE-2026-1141846.5Medium—6.5MediumWordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerabilitywpvibes elementor addon elements42 MIN AGO

CVE-2026-103634—Unrated——UnratedApache DataSketches: datasketches-cpp: Out-of-bounds read and write in Count-Min sketch deserialization allows memory corruption via a crafted sketchapache software foundation apache datasketches45 MIN AGO

CVE-2026-1144605.3Medium—5.3MediumMod_qos: query truncation during json body merging permits security-rule bypasspbuchbinder mod_qos50 MIN AGO

CVE-2026-1144593.7Low—3.7LowMod_qos: out-of-bounds reads in response-body substring matchingpbuchbinder mod_qos50 MIN AGO

CVE-2026-1144585.9Medium—5.9MediumMod_qos: undersized connection-monitor scratch array permits heap buffer overflowpbuchbinder mod_qos50 MIN AGO

CVE-2026-1144573.7Low—3.7LowMod_qos: missing nul termination in json value escaping permits out-of-bounds readspbuchbinder mod_qos50 MIN AGO

View all 413,012 records

05 Recently added to KEV

KEVCVE-2026-96656plex media serverAdded 2026-10-20

KEVCVE-2026-96655plex media serverAdded 2026-10-20

KEVCVE-2026-96654plex media serverAdded 2026-10-20

KEVCVE-2026-96652plex media serverAdded 2026-10-20

KEVCVE-2026-110936siemens siemens software centerAdded 2026-10-20

KEVCVE-2026-106931eg secure solutions inc. siteguard server edition for apache httpd eg secure solutions inc. siteguard server edition for apache httpd on freebsd eg secure solutions inc. siteguard server edition for iis eg secure solutions inc. siteguard server edition for nginx eg secure solutions inc. siteguard server edition for nginx on freebsdAdded 2026-10-20