Vulnerability Intelligence · All CVEs
Every Published CVE, Searchable.
Every published CVE keeps a row, so any identifier resolves to its severity, dates and exploitation status.
Synced hourly · figures as of Oct 19, 2026
11,301 vulnerabilities · newest first
- CVE-2026-94297Low 2.7Media Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term CreationPublished Sep 30, 2026
- CVE-2026-88791Low 3.4Safe Redirect Manager < 2.3.0 - Open Redirect via Wildcard Redirect RulesPublished Sep 30, 2026
- CVE-2026-82127Low 3.5Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term FieldsPublished Sep 30, 2026
- CVE-2026-51936Low 2.1Zetetic SQLCipher before 4.15.0 allows SQL injection.Published Sep 30, 2026
- CVE-2026-69662Low 2.1The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.Published Sep 29, 2026
- CVE-2026-103012Low 2.0Managed Settings Not Applied When a Stored API Key Was Preferred Over Enterprise Sign-InPublished Sep 29, 2026
- CVE-2026-102877Low 2.1Fider before 0.38.0 SSRF via DNS rebinding in webhook validationPublished Sep 29, 2026
- CVE-2026-102315Low 3.4Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.Published Sep 29, 2026
- CVE-2026-102319Low 3.4Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.Published Sep 29, 2026
- CVE-2026-102311Low 3.4Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.Published Sep 29, 2026
- CVE-2026-76738Low 2.7Authenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-ServicePublished Sep 29, 2026
- CVE-2026-76737Low 3.0Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant OnPublished Sep 29, 2026
- CVE-2026-76736Low 3.3Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant OnPublished Sep 29, 2026
- CVE-2026-102825Low 3.7Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime pathPublished Sep 29, 2026
- CVE-2026-102822Low 3.7russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panicPublished Sep 29, 2026
- CVE-2026-97711Low 2.3Serialize JavaScript: Cross-site scripting (XSS) via unescaped in serialized function bodiesPublished Sep 29, 2026
- CVE-2026-102630Low 2.3UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-HostPublished Sep 29, 2026
- CVE-2026-77696Low 3.7Timing Side-Channel in SM2 Signature GenerationPublished Sep 29, 2026
- CVE-2026-54875Low 3.7Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-VPublished Sep 29, 2026
- CVE-2026-54872Low 3.7Timing Side-Channel in Scalar Multiplication for Non-NIST EC CurvesPublished Sep 29, 2026
- CVE-2026-35191Low 3.7QUIC Unvalidated Amplification Credit may be Over AccountedPublished Sep 29, 2026
- CVE-2026-102601Low 3.5Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapterPublished Sep 29, 2026
- CVE-2026-101266Low 1.3A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps.Published Sep 29, 2026
- CVE-2026-101271Low 2.1OAuth credentials not disabled when application is disabledPublished Sep 29, 2026
- CVE-2026-101270Low 2.1CVE-2026-101270Published Sep 29, 2026
- CVE-2026-101269Low 2.3Incorrect session validation for API-uploaded filesPublished Sep 29, 2026
- CVE-2026-101268Low 1.7Customer session fixationPublished Sep 29, 2026
- CVE-2026-101267Low 2.7Revenue information leakPublished Sep 29, 2026
- CVE-2026-4523Low 3.7Missing Authorization in GitLabPublished Sep 29, 2026
- CVE-2026-102366Low 2.1mall4j through 4.0 contains an unrestricted file upload vulnerability in FileController endpoints that lack authorization checks and accept arbitrary file types without validation.Published Sep 29, 2026
- CVE-2026-101265Low 2.3Such manipulation leads to inclusion of sensitive information in source code.Published Sep 29, 2026
- CVE-2026-102279Low 3.1Laravel: XSS in Debug Page InformationPublished Sep 28, 2026
- CVE-2026-97027Low 3.6Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service filesPublished Sep 28, 2026
- CVE-2026-97026Low 3.9Flatpak: flatpak: world-writable temporary child repositories in system-helper cache pathPublished Sep 28, 2026
- CVE-2026-97025Low 3.2Flatpak: flatpak: world-readable oci authentication token in system-helper cache pathPublished Sep 28, 2026
- CVE-2026-18416Low 3.7Out-of-bounds read in CoAP well-known-core Uri-Query href matching (match_path_uri)Published Sep 28, 2026
- CVE-2026-101915Low 3.7@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messagesPublished Sep 28, 2026
- CVE-2026-101132Low 2.3DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversalPublished Sep 28, 2026
- CVE-2026-101080Low 2.4Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversalPublished Sep 28, 2026
- CVE-2026-101861Low 2.1Langflow Code Execution via eval() in Component Input SchemaPublished Sep 28, 2026
- CVE-2026-101079Low 2.4agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decisionPublished Sep 28, 2026
- CVE-2026-97399Low 3.7One-byte overread in strncasecmp on Power8Published Sep 28, 2026
- CVE-2026-101333Low 3.7Keycloak-services: keycloak-services: unbounded metric series creation via idp tag on broker login endpointPublished Sep 28, 2026
- CVE-2026-96284Low 2.5Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink followingPublished Sep 27, 2026
- CVE-2026-96282Low 3.1Flatpak: flatpak: extension metadata path traversal file existence oraclePublished Sep 27, 2026
- CVE-2026-96283Low 3.3Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pullPublished Sep 27, 2026
- CVE-2026-100881Low 2.1zhistaredu StarTraining application.yml cross site scriptingPublished Sep 27, 2026
- CVE-2026-101089Low 2.3Nezha before 2.2.7 Information Disclosure via /api/v1/profilePublished Sep 27, 2026
- CVE-2026-101061Low 2.3utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes.Published Sep 27, 2026
- CVE-2026-101057Low 2.3utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration without the ensure_secure_url validation that the HTTP-family plugins apply, so…Published Sep 27, 2026
| CVE | Title | Severity | Published |
|---|---|---|---|
| CVE-2026-94297 | Media Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation | Low 2.7 | |
| CVE-2026-88791 | Safe Redirect Manager < 2.3.0 - Open Redirect via Wildcard Redirect Rules | Low 3.4 | |
| CVE-2026-82127 | Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term Fields | Low 3.5 | |
| CVE-2026-51936 | Zetetic SQLCipher before 4.15.0 allows SQL injection. | Low 2.1 | |
| CVE-2026-69662 | The application uses unsafe functions that allow execution of inline scripts and string evaluation functions. | Low 2.1 | |
| CVE-2026-103012 | Managed Settings Not Applied When a Stored API Key Was Preferred Over Enterprise Sign-In | Low 2.0 | |
| CVE-2026-102877 | Fider before 0.38.0 SSRF via DNS rebinding in webhook validation | Low 2.1 | |
| CVE-2026-102315 | Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. | Low 3.4 | |
| CVE-2026-102319 | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. | Low 3.4 | |
| CVE-2026-102311 | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. | Low 3.4 | |
| CVE-2026-76738 | Authenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-Service | Low 2.7 | |
| CVE-2026-76737 | Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On | Low 3.0 | |
| CVE-2026-76736 | Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant On | Low 3.3 | |
| CVE-2026-102825 | Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path | Low 3.7 | |
| CVE-2026-102822 | russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic | Low 3.7 | |
| CVE-2026-97711 | Serialize JavaScript: Cross-site scripting (XSS) via unescaped in serialized function bodies | Low 2.3 | |
| CVE-2026-102630 | UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host | Low 2.3 | |
| CVE-2026-77696 | Timing Side-Channel in SM2 Signature Generation | Low 3.7 | |
| CVE-2026-54875 | Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V | Low 3.7 | |
| CVE-2026-54872 | Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves | Low 3.7 | |
| CVE-2026-35191 | QUIC Unvalidated Amplification Credit may be Over Accounted | Low 3.7 | |
| CVE-2026-102601 | Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter | Low 3.5 | |
| CVE-2026-101266 | A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps. | Low 1.3 | |
| CVE-2026-101271 | OAuth credentials not disabled when application is disabled | Low 2.1 | |
| CVE-2026-101270 | CVE-2026-101270 | Low 2.1 | |
| CVE-2026-101269 | Incorrect session validation for API-uploaded files | Low 2.3 | |
| CVE-2026-101268 | Customer session fixation | Low 1.7 | |
| CVE-2026-101267 | Revenue information leak | Low 2.7 | |
| CVE-2026-4523 | Missing Authorization in GitLab | Low 3.7 | |
| CVE-2026-102366 | mall4j through 4.0 contains an unrestricted file upload vulnerability in FileController endpoints that lack authorization checks and accept arbitrary file types without validation. | Low 2.1 | |
| CVE-2026-101265 | Such manipulation leads to inclusion of sensitive information in source code. | Low 2.3 | |
| CVE-2026-102279 | Laravel: XSS in Debug Page Information | Low 3.1 | |
| CVE-2026-97027 | Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files | Low 3.6 | |
| CVE-2026-97026 | Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path | Low 3.9 | |
| CVE-2026-97025 | Flatpak: flatpak: world-readable oci authentication token in system-helper cache path | Low 3.2 | |
| CVE-2026-18416 | Out-of-bounds read in CoAP well-known-core Uri-Query href matching (match_path_uri) | Low 3.7 | |
| CVE-2026-101915 | @grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages | Low 3.7 | |
| CVE-2026-101132 | DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal | Low 2.3 | |
| CVE-2026-101080 | Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal | Low 2.4 | |
| CVE-2026-101861 | Langflow Code Execution via eval() in Component Input Schema | Low 2.1 | |
| CVE-2026-101079 | agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision | Low 2.4 | |
| CVE-2026-97399 | One-byte overread in strncasecmp on Power8 | Low 3.7 | |
| CVE-2026-101333 | Keycloak-services: keycloak-services: unbounded metric series creation via idp tag on broker login endpoint | Low 3.7 | |
| CVE-2026-96284 | Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following | Low 2.5 | |
| CVE-2026-96282 | Flatpak: flatpak: extension metadata path traversal file existence oracle | Low 3.1 | |
| CVE-2026-96283 | Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull | Low 3.3 | |
| CVE-2026-100881 | zhistaredu StarTraining application.yml cross site scripting | Low 2.1 | |
| CVE-2026-101089 | Nezha before 2.2.7 Information Disclosure via /api/v1/profile | Low 2.3 | |
| CVE-2026-101061 | utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. | Low 2.3 | |
| CVE-2026-101057 | utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration without the ensure_secure_url validation that the HTTP-family plugins apply, so… | Low 2.3 |
Showing 301–350 of 11,301. Narrow the filters to see the rest.
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Every published CVE keeps a row, so any identifier resolves to its severity, dates and exploitation status. Filter by severity and year here; the other filters work on the curated lists.