01 Search console
The CVE corpus, on scope in milliseconds.
418,481 records · updated every 15 minutes
02 Telemetry
Total CVEs418,481
New today309
Known-exploited (KEV)1,765
Sync lag6 MIN
03 Severity mix
04 Latest published
CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-1194875.3Medium—WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerabilitywedevs dokan9 MIN AGO
CVE-2026-1208436.5Medium—WordPress Posts Table with Search & Sort plugin <= 1.4.14 - Cross Site Scripting (XSS) vulnerabilitybarn2 plugins posts table with search & sort11 MIN AGO
CVE-2026-1141836.5Medium—WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerabilitywpvibes anywhere elementor12 MIN AGO
CVE-2026-1168595.3Medium—WordPress Forminator plugin <= 1.58.3 - Broken Access Control vulnerabilitywpmu dev forminator14 MIN AGO
CVE-2026-1168584.3Medium—WordPress Forminator plugin <= 1.58.3 - Content Injection vulnerabilitywpmu dev forminator16 MIN AGO
CVE-2026-397435.3Medium—WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerabilitywc lovers wcfm membership17 MIN AGO
CVE-2026-1208465.3Medium—WordPress Uncanny Automator plugin <= 7.7.1 - Broken Access Control vulnerabilityuncanny owl uncanny automator18 MIN AGO
CVE-2026-1157147.4High—Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connectionselastic elastic docker images18 MIN AGO
CVE-2026-1157166.5Medium—Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Serviceelastic apm server18 MIN AGO
CVE-2026-1157156.5Medium—Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Serviceelastic elasticsearch18 MIN AGO
CVE-2026-1157104.2Medium—Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosureelastic elasticsearch18 MIN AGO
CVE-2026-1152984.3Medium—Incorrect Authorization in Elasticsearch Leading to Information Disclosureelastic elasticsearch18 MIN AGO
CVE-2026-1152976.5Medium—NULL Pointer Dereference in Packetbeat Leading to Denial of Serviceelastic packetbeat18 MIN AGO
CVE-2026-1152954.3Medium—Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosureelastic kibana18 MIN AGO
CVE-2026-1152947.3High—Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletionelastic kibana18 MIN AGO
05 Recently added to KEV
KEVCVE-2026-76418cisco cisco secure firewall adaptive security appliance (asa) software cisco cisco secure firewall threat defense (ftd) softwareAdded 2026-10-29
KEVCVE-2026-41709vmware cloud foundation vmware esx vmware telco cloud platform vmware vsphere foundationAdded 2026-10-28
KEVCVE-2026-48356adobe adobe commerce adobe adobe commerce b2b adobe adobe commerce events adobe magento open sourceAdded 2026-10-27