01 Search console

The CVE corpus, on scope in milliseconds.

416,716 records · updated every 15 minutes

02 Telemetry

Total CVEs416,716

New today450

Known-exploited (KEV)1,762

Sync lag20 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1073478.4High—8.4HighNomad dispatch payload writes can escape the allocation directory through symlinkshashicorp nomad hashicorp nomad enterprise14 MIN AGO

CVE-2026-1022604.3Medium—4.3MediumNomad vulnerable to cross-namespace information disclosure in multiple endpointshashicorp nomad hashicorp nomad enterprise18 MIN AGO

CVE-2026-1165665.3Medium—5.3Mediumsocket.getaddrinfo() accepts embedded null bytes in host and portpython software foundation cpython38 MIN AGO

CVE-2026-1187699.2Critical—9.2CriticalBotan: Integer overflow when reporting block size in FFI can cause memory corruptionrandombit botan1 HR AGO

CVE-2026-1187685.9Medium—5.9MediumBotan: CLI utility `ocsp_check` accepts unauthenticated responsesrandombit botan1 HR AGO

CVE-2026-1187674.8Medium—4.8MediumBotan: Python binding bcrypt APIs truncate passwords containing embedded NULsrandombit botan1 HR AGO

CVE-2026-1187666.1Medium—6.1MediumBotan: Online OCSP redirects enable blind requests to internal HTTP servicesrandombit botan1 HR AGO

CVE-2026-1187657.3High—7.3HighBotan: AutoSeeded_RNG can become reinitialized from predictable data after clearing staterandombit botan1 HR AGO

CVE-2026-1187648.7High—8.7Highminimatch: potential denial of service via globparts amplificationisaacs minimatch1 HR AGO

CVE-2026-1187637.4High—7.4High@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Locationsigstore sigstore-js1 HR AGO

CVE-2026-1187629.3Critical—9.3CriticalMonkeytype: fork PR can execute code with elevated GITHUB_TOKENmonkeytypegame monkeytype1 HR AGO

CVE-2026-1158057.8High—7.8HighRapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Pathrapid7 insight agent1 HR AGO

CVE-2026-115877.2High—7.2HighAuthenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0centreon centreon1 HR AGO

CVE-2023-73578.6High—8.6HighFlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerabilityrevera flexnet publisher1 HR AGO

CVE-2026-1187617.5High—7.5HighKubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memorykubeflow pipelines1 HR AGO

View all 416,716 records

05 Recently added to KEV

KEVCVE-2026-46300linux linuxAdded 2026-10-28

KEVCVE-2026-41709vmware cloud foundation vmware esx vmware telco cloud platform vmware vsphere foundationAdded 2026-10-28

KEVCVE-2026-48356adobe adobe commerce adobe adobe commerce b2b adobe adobe commerce events adobe magento open sourceAdded 2026-10-27

KEVCVE-2026-111497google brotliAdded 2026-10-27

KEVCVE-2026-109619php group phpAdded 2026-10-26

KEVCVE-2026-109618php group phpAdded 2026-10-26