Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Minimum sightings per line
1
2
3
4
5
Loading…
Loading…
Loading…
Loading…
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
CVE Program structure
Structure on cve.orgThis diagram is rendered live from the CNA partner catalogue stored in our database, synchronized from cve.org via GCVE — not a static image.
-
42Gears ABB ADI AMI arcinfo Armis ASR ASRG ASUS azure-access B.Braun BAE Baxter BD BECDX BECLS BHV bosch Carrier CEP CODRA Cribl CTOne CyberDanube Cytiva Danfoss Deltaww Digi Dragos eclypsium Entrust Gallagher GE_Healthcare GE_Vernova Hackrate HemoCue Hitachi_Energy Hologic Honeywell hsi IDBS IDT-DNA jci JupiterOne LeicaBiosystems Leonardo LMS Medtronic MHV MIM MolDev Moxa MyMMT NetRise NIBEGroup OMICRON ONEKEY Pall Philips PTC Radiometer Roche Rockwell runZero SCIEX Secomea SEL siemens Simplinx SOCRadar SRA Stryker tlt_net TMUS TRO TXOne Vantive Verizon vx WindRiver wolfSSL XONA Xylem
-
CERTVDE CNA 0 CNAs
-
- 1 CNAs directly under CISA
-
376 CNAs directly under mitre
2N 9front @huntr_ai Absolute Acer Acronis adobe AHA airbus Airlock AlgoSec alibaba Almaviva Altera Altium AMD Ampere AMZN Anolis Antenna Anthropic apache AppCheck apple ARCON Arista Arm Arxscan ASUSTOR atlassian autodesk Automox avaya Axis AxxonSoft Baidu BCNY bcorg Bitdefender bizerba blackberry BlackDuck BLSOPS BombadilSystems brocade BT Bugcrowd ByteDance ca Caliptra Canon_EMEA canonical Canva Cato Censys Centreon CERT-In certcc Checkmarx Checkmk checkpoint Ciena cirosec cisco Citrix ClickHouse cloudflare Commvault ConcreteCMS ConnectWise CoolKit Crafter_CMS Crestron CrowdStrike CSA CSAI CSW CyberArk cygence Cynet dahua Dassault_Systemes debian Delinea dell DevCycle DEVOLUTIONS Dfinity DHIS2 directcyber Docker dotCMS Dremio drupal DSF DTEX DualVS EA Eaton Echo eclipse EDB EEF ELAN elastic ERIC Esri Everpure ExtremeNetworks F5 Fidelis flexera floragunn Fluid_Attacks forcepoint Forescout fortinet Fortra Foxit freebsd FSI FSOFT FTI FULL GEN Genetec Gitea GitHub_M GitHub_P GitLab GRAFANA GreenRocketSecurity GV hackerone Halborn Hanwha_Vision HashiCorp HCL HeroDevs HiddenLayer hikvision Hillstone Hitachi_Vantara Honor hp hpe huawei Huntress HYPR ibm ICT IDEMIA Illumio imaginationtech iManage INCD Insyde intel Intigriti IoT83 isc ivanti JAMF Jaspersoft jenkins JetBrains JFrog Joomla juniper Kaspersky KCFTech KeeperSecurity KNIME Kong KoreLogic krcert kubernetes larry_cashdollar lenovo Lexmark LGE libreswan Liferay linqi Linux Logitech M-Files Mattermost Mautic MediaTek Meta Microchip microsoft milestonesys Mirantis MON-CSIRT mongodb mozilla N-able naver NCSC.ch Neo4j netapp netflix NETGEAR NetScaler Netskope NI NLnet_Labs nodejs Nokia Nozomi Nutanix nvidia NX OAI OB obdev Octopus ODA odoo Okta Omnissa OnLogic OpenBMC openEuler openGauss OpenHarmony OpenNMS openssl OpenText OpenVPN Opera OPPO oracle OS-S OTRS OX Palantir palo_alto PangeaCyber PaperCut Patchstack Payara Pega Pentraze Perforce Phoenix php PingCAP PingIdentity PlexTrac postiz PRJBLK Profelis Profisee ProgressSoftware Proofpoint Proton PSF QCI qnap Qt qualcomm Qualys rami.io rapid7 RealPage Replicated Ribose RTI SailPoint Salesforce samsung.tv_appliance Samsung_Mobile sap Saviynt sba-research schneider SCHUTZWERK SDC Seagate seal SEC-VLab sec1 securepoint Securifera securin Semtech senhasegura ShopBeat SICK_AG Silabs Silver_Peak sirius SmileDigitalHealth SN Snow SNOW snyk Softing SoftIron SolarWinds Solidigm Sonatype sonicwall Sophos Spotfire Stackable STAR_Labs StrongDM Supermicro suse Swift symantec Synaptics Syncro synology Synopsys talos Tanium TCL_Smart_Terminal Tcpdump TeamViewer TECNOMobile Tego_Cyber Temporal tenable The_Missing_Link ThinkstAppliedResearch TianoCore tibco Tigera Toreon TPLink TR-CERT Trellix trendmicro tuxcare twcert TYPO3 Ubiquiti Unisoc Uniview upKeeper Vaadin Vestel Vivo vmware VulDB VulnCheck watchdog WatchGuard WDC_PSIRT wikimedia-foundation Wiz Wordfence WPScan WrenSecurity WSO2 XEN Xerox XI Xiaomi yandex Yugabyte Zabbix zdi zephyr Zohocorp Zoom Zowe Zscaler ZTE ZUSO_ART Zyxel
Latest vulnerabilities published by the CNAs operating under each root of the CVE Program.
-
CVE-2026-77966 2026-08-31Ebyte NA111-M Missing Authorization
-
CVE-2026-76133 2026-08-31Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm
-
CVE-2026-73819 2026-08-31Ebyte NA111-M Weak Authentication
-
CVE-2026-77975 2026-08-31Ebyte NA111-M Cleartext Storage of Sensitive Information
-
CVE-2026-81341 2026-08-28wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records
-
CVE-2026-81020 2026-08-28wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
-
CVE-2026-81019 2026-08-28wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
-
CVE-2026-77977 2026-08-27Ebyte NA111-M Missing Authentication for Critical Function
-
CVE-2026-76943 2026-08-27Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel
-
CVE-2026-78239 2026-08-27Xiiaozet LK100W Missing Authentication for Critical Function
-
CVE-2026-59111 2026-08-31Command Injection vulnerability in eObčanka-Identifikace
-
CVE-2026-81827 2026-08-27Flowintel Login Email Validation Bypass Allows Log Injection via Craf…
-
CVE-2026-81826 2026-08-27Flowintel Fails to Invalidate Active Sessions After Password Change
-
CVE-2026-81820 2026-08-27Flowintel HTML Injection in MISP Case History Timeline via Crafted Ob…
-
CVE-2026-56651 2026-08-27Arbitrary File Overwrite via Symlink Following in dool project
-
CVE-2026-56652 2026-08-27Formula Injection in dool project
-
CVE-2026-81819 2026-08-27Flowintel Missing Authorization Allows Regular API Users to View Othe…
-
CVE-2026-81818 2026-08-27Flowintel Organization Administrator Can Reset Full Administrator Pas…
-
CVE-2026-81817 2026-08-27Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task M…
-
CVE-2026-81814 2026-08-27Flowintel Stored XSS in Calendar via Malicious Case Title
-
CVE-2026-19410 2026-08-31Google Cloud Build Comment Control Bypass via Webhook Suppression
-
CVE-2026-56854 2026-08-28Source-address critical option not enforced for non-public-key auth c…
-
CVE-2026-82072 2026-08-27Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allo…
-
CVE-2026-19485 2026-08-26Bucket Squatting in Vertex AI Search for Commerce
-
CVE-2026-75062 2026-08-26Eval Injection in google/langfun via default lf.query protocol
-
CVE-2026-12717 2026-08-26Remote Code Execution in BigQuery Data Transfer Service via JDBC Conn…
-
CVE-2026-78964 2026-08-25Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977…
-
CVE-2026-78914 2026-08-25Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.6…
-
CVE-2026-79254 2026-08-25Incorrect reference resolution in CustomTabs in Google Chrome on on A…
-
CVE-2026-79260 2026-08-25Improper input validation in Cookies in Google Chrome prior to 152.0.…
-
CVE-2026-77966 2026-08-31Ebyte NA111-M Missing Authorization
-
CVE-2026-76133 2026-08-31Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm
-
CVE-2026-73819 2026-08-31Ebyte NA111-M Weak Authentication
-
CVE-2026-77975 2026-08-31Ebyte NA111-M Cleartext Storage of Sensitive Information
-
CVE-2026-81341 2026-08-28wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records
-
CVE-2026-81020 2026-08-28wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
-
CVE-2026-81019 2026-08-28wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
-
CVE-2026-77977 2026-08-27Ebyte NA111-M Missing Authentication for Critical Function
-
CVE-2026-76943 2026-08-27Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel
-
CVE-2026-78239 2026-08-27Xiiaozet LK100W Missing Authentication for Critical Function
-
CVE-2026-81931 2026-08-27Unrestricted upload of file with dangerous type in Prospero Flow CRM …
-
CVE-2026-81677 2026-08-27Multiple Vulnerabilities in TOOOLS' iSquad
-
CVE-2026-81676 2026-08-27Multiple Vulnerabilities in TOOOLS' iSquad
-
CVE-2026-81675 2026-08-27Multiple Vulnerabilities in TOOOLS' iSquad
-
CVE-2026-81674 2026-08-27Multiple Vulnerabilities in TOOOLS' iSquad
-
CVE-2026-81673 2026-08-27Multiple Vulnerabilities in TOOOLS' iSquad
-
CVE-2026-81672 2026-08-27Multiple Vulnerabilities in TOOOLS' iSquad
-
CVE-2026-12587 2026-08-26Embedded credentials in Virtuagym
-
CVE-2026-12600 2026-08-25Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder
-
CVE-2026-78365 2026-08-24IDOR and missing authorization in Prospero Flow CRM supplier API allo…
-
CVE-2026-53620 2026-08-31GROWI contains a vulnerability with an authorization bypass through u…
-
CVE-2026-68951 2026-08-31GROWI contains an incorrect authorization vulnerability. If this vuln…
-
CVE-2026-78032 2026-08-28SOY CMS contains an issue with deserialization of untrusted data. An…
-
CVE-2026-78238 2026-08-28SOY Gallery contains a cross-site scripting vulnerability. An arbitr…
-
CVE-2026-77838 2026-08-28SOY Calendar contains a cross-site scripting vulnerability. An arbitr…
-
CVE-2026-73827 2026-08-28SOY Calendar contains a cross-site scripting vulnerability. An arbitr…
-
CVE-2026-76149 2026-08-26CorvusSKK contains an integer overflow vulnerability, which may allow…
-
CVE-2026-76148 2026-08-26CorvusSKK contains a code injection vulnerability, which may lead to …
-
CVE-2026-73335 2026-08-26Android application "Myna Point" is vulnerable to Improper Authorizat…
-
CVE-2026-59769 2026-08-25FA-50 all versions contain hard-coded credentials. An attacker, who …
-
CVE-2026-82749 2026-09-01Ash relationship parent(...) filter degrades to an IS NULL match when…
-
CVE-2026-82748 2026-09-01Ash.Actions.Aggregate authorizes an aggregate under one action but co…
-
CVE-2026-82746 2026-09-01Ash.update_many/4 atomic path skips resource policy authorization, al…
-
CVE-2026-82745 2026-09-01ETS and Mnesia data layers overwrite an existing record on create ins…
-
CVE-2026-82744 2026-09-01Ash.Reactor change step fails open, skipping a change when its where …
-
CVE-2026-82743 2026-09-01Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting s…
-
CVE-2026-82742 2026-09-01Ash.Filter.Runtime materializes a combinatorial cross-product over to…
-
CVE-2026-82741 2026-09-01Ash.Type.Union with :map_with_tag does not force the tag on dump, ena…
-
CVE-2026-82740 2026-09-01Ash.Type ignores outer array constraints on nested {:array, {:array, …
-
CVE-2026-82739 2026-09-01Ash.Resource.Validation.Confirm leaks a confirmed field's stored valu…
-
CVE-2026-18743 2026-09-01Popt-devel: popt-static: short realloc in poptconfigfiletostring
-
CVE-2026-83596 2026-08-31Webkitgtk: validate the full featurelist array once in opentypevertic…
-
CVE-2026-13732 2026-08-31Gdb: gdb: out-of-bounds write in stabs parser read_member_functions()…
-
CVE-2026-19953 2026-08-31URI versions before 5.36 for Perl encode non-NFC host names to non-st…
-
CVE-2026-17615 2026-08-31Resteasy-core: resteasy sourceprovider remote unauthenticated file read
-
CVE-2026-76763 2026-08-31Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denia…
-
CVE-2026-12894 2026-08-31Quarkus-qute: io.quarkus.qute.reflectionvalueresolver: quarkus:server…
-
CVE-2026-19873 2026-08-31HTML::FormFu versions through 2.08 for Perl allow resource exhaustion…
-
CVE-2026-81624 2026-08-31Undertow-core: undertow: websocketcontainer defaults for buffers and …
-
CVE-2026-82562 2026-08-29qs.parse does not enforce arrayLimit on comma groups under bracket-pu…
-
CVE-2026-9007 2026-07-15Reflected XSS in HCL Notes
-
CVE-2026-13014 2026-07-13Remote Code Execution vulnerability in "Suspicious" application
-
CVE-2026-6805 2026-05-07Vulnerability on Cryptobox external sharing feature
-
CVE-2026-6501 2026-05-04Improper restriction of XML external entity reference vulnerability i…
-
CVE-2026-6500 2026-05-04Plaintext storage of a password vulnerability in ILM Informatique Ope…
-
CVE-2026-6499 2026-05-04Incorrect Permission Assignment for Critical Resource vulnerability i…
-
CVE-2026-5794 2026-04-28Vulnerability in Cryptobox allows an authenticated user to trigger an…
-
CVE-2026-3457 2026-03-27Stored XSS vulnerability in Sentinel ACC
-
CVE-2026-0872 2026-02-13Improper Certificate Validation vulnerability in Thales SafeNet Agent…
-
CVE-2026-2344 2026-02-11Stored XSS on Plunet BusinessManager