CVE Database
Vulnerability intelligencewith CVSS, EPSS & KEV
High-priority CVEs scored by CVSS, EPSS and CISA KEV, synced daily from NVD, CISA, CERT-FR, MSRC and GHSA.
- CISA KEV
- 0
- Known exploited in this sample
- Critical severity
- 19
- CVSS severity = CRITICAL
- Actively exploited
- 0
- SSVC exploitation = active
Coverage
What each CVE page carries and where it stops.
- Prioritization signals
- CVSS, EPSS, CISA KEV, SSVC exploitation state, Nuclei templates and exploit references.
- Primary sources
- NVD, CISA, CERT-FR, Microsoft MSRC, GitHub Security Advisories and public exploit metadata.
- Best fit
- Patch prioritization, SBOM triage, exposed-service review and incident response.
- Limitations
- Public risk only. Confirm your exposure and the vendor patch before remediating.
Latest advisories
Recent high-priority vulnerabilities
Advisories with enough severity or exploitation signal to earn a stable public page.
- CVE-2026-925462026-10-27Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic AllyHIGHCVSS 7.5
- CVE-2026-651512026-10-27NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure.HIGHCVSS 8.4
- CVE-2026-651452026-10-27Missing Authentication in NVIDIA NeMo Agent Toolkit Enabling Remote Code Execution and Privilege EscalationCRITICALCVSS 10
- CVE-2026-651202026-10-27Server‑Side Request Forgery Leading to Information Disclosure in NVIDIA TensorRT‑LLMHIGHCVSS 7.1
- CVE-2026-651192026-10-27Untrusted Tokenizer Loading in TensorRT-LLM May Allow Code ExecutionHIGHCVSS 8.4
- CVE-2026-474862026-10-27Out-of-Bounds Write in NVIDIA PhysX Leading to Potential Code ExecutionHIGHCVSS 7.8
- CVE-2026-242692026-10-27Server‑Side Request Forgery in NVIDIA TensorRT‑LLM Leading to Information Disclosure and Data TamperingHIGHCVSS 7.1
- CVE-2026-1001642026-10-27User Enumeration in Rolantis Information Technologies' AgentisHIGHCVSS 7.5
- CVE-2026-43372026-10-27Unrestricted Upload of File in PuMuKIT applicationHIGH
- CVE-2026-410212026-10-27Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials.HIGHCVSS 7.5
- CVE-2026-410202026-10-27Replay Attack via Static Nonce in Eaton easyE4 AuthenticationHIGHCVSS 7.5
- CVE-2026-131622026-10-27OS Command Injection Vulnerability in CoreTec Time‑Zone ConfigurationHIGH
- CVE-2026-1152162026-10-27Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentialsCRITICAL
- CVE-2026-1123622026-10-27@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targetsCRITICALCVSS 9.1
- CVE-2026-107562026-10-27TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging port forwarding, an attacker can interact with locally bound ports and services, resulting in unauthorized access to sensitive functionality and confidential information, and causing availability impact.HIGH
- CVE-2026-1099952026-10-27Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment ContentHIGHCVSS 7.2
- CVE-2026-1060872026-10-27Arbitrary File Read in Hitachi Energy TRO600 FirmwareHIGH
- CVE-2026-1028002026-10-27Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0HIGH
- CVE-2026-1175402026-10-27svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping LoopHIGHCVSS 7.5
- CVE-2026-1175362026-10-27REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege EscalationHIGHCVSS 8.8
- CVE-2026-1175322026-10-27REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History PluginCRITICALCVSS 9.8
- CVE-2026-1174662026-10-27Privilege Escalation in Octopus Server via System Manager roleHIGH
- CVE-2026-1173412026-10-27Privilege Escalation through Exposure of Invitation Code in Octopus Server Audit LogHIGH
- CVE-2026-1168982026-10-27REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk MoveHIGHCVSS 7.1
- CVE-2026-1168962026-10-27REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication TablesHIGHCVSS 7.5
- CVE-2026-1168902026-10-27Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask APIHIGHCVSS 7.3
- CVE-2026-1168802026-10-27Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance ActionsHIGHCVSS 7.1
- CVE-2026-1168782026-10-27Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarityHIGHCVSS 7.5
- CVE-2026-1168762026-10-27Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protectedHIGHCVSS 7.1
- CVE-2026-1168732026-10-27Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and updateHIGHCVSS 7.3
- CVE-2026-1168722026-10-27Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact FiltersHIGHCVSS 7.5
- CVE-2026-1168712026-10-27Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:AskHIGHCVSS 7.5
- CVE-2026-1168702026-10-27Inconsistent OIDC Token Issuer Validation Allows Unauthorized Token AcceptanceHIGH
- CVE-2026-865772026-10-27Out-of-bounds Write Vulnerability in JP1 ProductsCRITICALCVSS 9.4EPSS 0.5 %
- CVE-2026-865762026-10-27Heap-based Buffer Overflow Vulnerability in JP1 ProductsCRITICALCVSS 9.4EPSS 0.5 %
- CVE-2026-865752026-10-27Stack-based Buffer Overflow Vulnerability in JP1 ProductsCRITICALCVSS 9.4EPSS 0.5 %
- CVE-2026-865742026-10-27Heap-based Buffer Overflow Vulnerability in JP1/BaseCRITICALCVSS 9.8EPSS 0.5 %
- CVE-2026-852992026-10-27Missing Authorization in Compute Engine allows Cross-Project Disk ExfiltrationHIGHEPSS 0.4 %
- CVE-2026-821222026-10-27Stack-based Buffer Overflow Vulnerability in HiRDBCRITICALCVSS 9.4EPSS 0.5 %
- CVE-2026-821212026-10-27Origin Validation Error Vulnerability in HiRDBHIGHCVSS 7.5EPSS 0.2 %
- CVE-2026-821202026-10-27Heap-based Buffer Overflow Vulnerability in HiRDBCRITICALCVSS 9.8EPSS 0.5 %
- CVE-2026-821192026-10-27OS Command Injection Vulnerability in HiRDBCRITICALCVSS 9.8EPSS 1.8 %
- CVE-2026-821182026-10-27Stack-based Buffer Overflow Vulnerability in HiRDBCRITICALCVSS 9.8EPSS 0.5 %
- CVE-2026-821172026-10-27Authentication Bypass by Spoofing Vulnerability in HiRDBCRITICALCVSS 9.8EPSS 0.6 %
- CVE-2026-821162026-10-27Missing Authentication for Critical Function Vulnerability in HiRDBCRITICALCVSS 9.8EPSS 0.6 %
- CVE-2026-769392026-10-27Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICALCVSS 9.8EPSS 0.5 %
- CVE-2026-769382026-10-27Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3CRITICALCVSS 9.8EPSS 0.6 %
- CVE-2026-769372026-10-27Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICALCVSS 9.4EPSS 0.5 %
- CVE-2026-769362026-10-27Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICALCVSS 9.4EPSS 0.5 %
- CVE-2026-769352026-10-27Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3CRITICALCVSS 9.4EPSS 0.5 %
Index
All CVE pages
One page per high-priority advisory — page 1 of 448.
CVE-2026-100164CVE-2026-109995CVE-2026-112362CVE-2026-116871CVE-2026-116872CVE-2026-116873CVE-2026-116876CVE-2026-116878CVE-2026-116880CVE-2026-116890CVE-2026-116896CVE-2026-116898CVE-2026-117532CVE-2026-117536CVE-2026-117540CVE-2026-24269CVE-2026-39725CVE-2026-41020CVE-2026-41021CVE-2026-47486CVE-2026-65119CVE-2026-65120CVE-2026-65145CVE-2026-65151CVE-2026-66588CVE-2026-92546CVE-2014-0160CVE-2014-6271CVE-2015-1635CVE-2017-5638CVE-2017-9841CVE-2018-13379CVE-2019-0708CVE-2019-11510CVE-2019-19781CVE-2020-5902CVE-2021-1498CVE-2021-21985CVE-2021-22005CVE-2021-26084CVE-2021-26086CVE-2021-35464CVE-2021-40438CVE-2021-44228CVE-2022-26134CVE-2022-29464CVE-2023-0669CVE-2023-1389CVE-2023-1671CVE-2023-22518CVE-2023-27350CVE-2023-32315CVE-2023-35078CVE-2023-35082CVE-2023-44487CVE-2023-4966CVE-2024-21887CVE-2024-21893CVE-2024-23897CVE-2024-3400CVE-2024-7593CVE-2025-53770CVE-2012-1823CVE-2013-2251CVE-2017-7921CVE-2022-22954CVE-2020-14882CVE-2026-109619CVE-2019-16920CVE-2018-11776CVE-2022-44877CVE-2024-3273CVE-2025-49704CVE-2017-10271CVE-2024-34102CVE-2020-8515CVE-2024-13159CVE-2025-3248CVE-2020-3452CVE-2021-41773CVE-2018-7600CVE-2023-29300CVE-2024-27199CVE-2023-50387CVE-2021-33044CVE-2020-9054CVE-2023-42793CVE-2024-4577CVE-2019-9670CVE-2022-40684CVE-2023-22527CVE-2023-46805CVE-2024-45195CVE-2021-20090CVE-2021-22204CVE-2025-0282CVE-2025-22457CVE-2026-109618CVE-2024-1709CVE-2025-59287CVE-2023-4863CVE-2024-24919CVE-2019-2725CVE-2021-45046CVE-2012-0158CVE-2024-4879CVE-2025-24893CVE-2025-5777CVE-2014-8361CVE-2017-12617CVE-2020-25506CVE-2025-31161CVE-2022-47986CVE-2021-42013CVE-2020-0688CVE-2021-3156CVE-2019-10149CVE-2018-2628CVE-2024-38475CVE-2022-1388CVE-2018-15961CVE-2023-38035CVE-2018-10562CVE-2017-11882CVE-2022-30525CVE-2021-3129CVE-2025-24813CVE-2020-10189CVE-2014-7169CVE-2022-22963CVE-2024-27198CVE-2024-29824CVE-2021-26085CVE-2023-34362CVE-2021-39226CVE-2022-42889CVE-2021-1497CVE-2025-4427CVE-2019-0232CVE-2025-25257CVE-2024-32113CVE-2026-10520CVE-2019-0604CVE-2019-3396CVE-2021-20038CVE-2022-24816CVE-2024-45519CVE-2015-1427CVE-2019-7481CVE-2020-7961
Looking for a specific CVE?
Search by CVE ID, keyword, product or vendor, or query the catalog with a free API key.