01 Search console

The CVE corpus, on scope in milliseconds.

424,776 records · updated every 15 minutes

02 Telemetry

Total CVEs424,776

New today237

Known-exploited (KEV)1,779

Sync lag8 MIN

03 Severity mix

04 Latest published

CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished

CVE-2026-1268379.1Critical—9.1CriticalAttacker able to redirect a client's database traffic to a host they control via special characters in an SRV target, bypassing the SRV parent-domain guardmongodb node.js driver9 MIN AGO

CVE-2026-1261917.5High—7.5HighSoup Sieve: Exponential ReDoS in selector compilation via \9-run in CSS_ESCAPES/IDENTIFIERfacelessuser soupsieve12 MIN AGO

CVE-2026-1218767.9High—7.9HighSandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)red hat red hat enterprise linux 10 red hat red hat enterprise linux 6 red hat red hat enterprise linux 7 red hat red hat enterprise linux 8 red hat red hat enterprise linux 9 red hat red hat openshift container platform 4 red hat red hat openshift container platform 513 MIN AGO

CVE-2026-1261907.5High—7.5HighSoup Sieve: Polynomial-time denial of service in the descendant combinatorfacelessuser soupsieve15 MIN AGO

CVE-2026-1261895.3Medium—5.3MediumSoup Sieve: Quadratic-time denial of service when matching `:has()`facelessuser soupsieve16 MIN AGO

CVE-2026-1246957.1High—7.1HighCross-Site Scripting in Kendo UI for jQuery Form Item Hintsprogress software kendo ui for jquery17 MIN AGO

CVE-2026-1272035.1Medium—5.1MediumAppFlowy Cloud 0.9.64 Stored XSS via Blob Upload Content-Typeappflowy-io appflowy-cloud26 MIN AGO

CVE-2026-1246917.1High—7.1HighCross-Site Scripting in Kendo UI for jQuery Gantt Parent Dropdownprogress software kendo ui for jquery26 MIN AGO

CVE-2026-1272026.3Medium—6.3MediumMLflow < 3.18.0 Path Traversal via model_id in log_outputs APImlflow mlflow32 MIN AGO

CVE-2025-106986.0Medium—6.0MediumImproper File Permissions on Private Key Files in Docker Deploymentsopentext identity console39 MIN AGO

CVE-2026-160522.3Low—2.3LowCookie Attribute Injection via Unescaped Semicolons in http.cookies.Morselpython software foundation cpython41 MIN AGO

CVE-2026-1270307.5High—7.5HighFreeradius: stack buffer overflow via unchecked eap-fast sessionticket lengthred hat red hat enterprise linux 10 red hat red hat enterprise linux 6 red hat red hat enterprise linux 7 red hat red hat enterprise linux 8 red hat red hat enterprise linux 947 MIN AGO

CVE-2026-1270297.5High—7.5HighFreeradius: stack-based buffer overflow via unbounded eap-sim identity lengthred hat red hat enterprise linux 10 red hat red hat enterprise linux 6 red hat red hat enterprise linux 7 red hat red hat enterprise linux 8 red hat red hat enterprise linux 947 MIN AGO

CVE-2026-1271455.3Medium—5.3MediumSOGo before 5.12.13 SSRF via Web Calendar Subscriptionsalinto sogo1 HR AGO

CVE-2026-1271417.1High—7.1HighSOGo before 5.12.13 Denial of Service via Auxiliary IMAP Account Greeting Waitalinto sogo1 HR AGO

View all 424,776 records

05 Recently added to KEV

KEVCVE-2026-20320cisco cisco broadworksAdded 2026-11-10

KEVCVE-2026-125350google chromeAdded 2026-11-10

KEVCVE-2026-124194microsoft microsoft 365 apps for enterprise microsoft microsoft office ltsc 2021 microsoft microsoft office ltsc 2024Added 2026-11-10

KEVCVE-2026-116606barracuda networks barracuda email security gateway (esg)Added 2026-11-10

KEVCVE-2026-111793openwave messaging (ireland) limited webtop media transcoderAdded 2026-11-10

KEVCVE-2026-111560barracuda networks barracuda email security gateway (esg) barracuda networks barracuda load balancer application delivery controller (adc) barracuda networks barracuda message archiver (bma) barracuda networks barracuda waf control center (wcc) barracuda networks barracuda web application firewall (waf) barracuda networks barracuda web security gateway (wsg)Added 2026-11-10