Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Minimum sightings per line
1
2
3
4
5
Loading…
Loading…
Loading…
Loading…
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
CVE Program structure
Structure on cve.orgThis diagram is rendered live from the CNA partner catalogue stored in our database, synchronized from cve.org via GCVE — not a static image.
-
42Gears ABB ADI AMI arcinfo Armis ASR ASRG ASUS azure-access B.Braun BAE Baxter BD BECDX BECLS BHV bosch Carrier CEP CODRA Cribl CTOne CyberDanube Cytiva Danfoss Deltaww Digi Dragos eclypsium Entrust Gallagher GE_Healthcare GE_Vernova Hackrate HemoCue Hitachi_Energy Hologic Honeywell hsi IDBS IDT-DNA jci JupiterOne LeicaBiosystems Leonardo LMS Medtronic MHV MIM MolDev Moxa MyMMT NetRise NIBEGroup OMICRON ONEKEY Pall Philips PTC Radiometer Roche Rockwell runZero SCIEX Secomea SEL siemens Simplinx SOCRadar SRA Stryker tlt_net TMUS TRO TXOne Vantive Verizon vx WindRiver wolfSSL XONA Xylem
-
CERTVDE CNA 0 CNAs
-
- 1 CNAs directly under CISA
-
376 CNAs directly under mitre
2N 9front @huntr_ai Absolute Acer Acronis adobe AHA airbus Airlock AlgoSec alibaba Almaviva Altera Altium AMD Ampere AMZN Anolis Antenna Anthropic apache AppCheck apple ARCON Arista Arm Arxscan ASUSTOR atlassian autodesk Automox avaya Axis AxxonSoft Baidu BCNY bcorg Bitdefender bizerba blackberry BlackDuck BLSOPS BombadilSystems brocade BT Bugcrowd ByteDance ca Caliptra Canon_EMEA canonical Canva Cato Censys Centreon CERT-In certcc Checkmarx Checkmk checkpoint Ciena cirosec cisco Citrix ClickHouse cloudflare Commvault ConcreteCMS ConnectWise CoolKit Crafter_CMS Crestron CrowdStrike CSA CSAI CSW CyberArk cygence Cynet dahua Dassault_Systemes debian Delinea dell DevCycle DEVOLUTIONS Dfinity DHIS2 directcyber Docker dotCMS Dremio drupal DSF DTEX DualVS EA Eaton Echo eclipse EDB EEF ELAN elastic ERIC Esri Everpure ExtremeNetworks F5 Fidelis flexera floragunn Fluid_Attacks forcepoint Forescout fortinet Fortra Foxit freebsd FSI FSOFT FTI FULL GEN Genetec Gitea GitHub_M GitHub_P GitLab GRAFANA GreenRocketSecurity GV hackerone Halborn Hanwha_Vision HashiCorp HCL HeroDevs HiddenLayer hikvision Hillstone Hitachi_Vantara Honor hp hpe huawei Huntress HYPR ibm ICT IDEMIA Illumio imaginationtech iManage INCD Insyde intel Intigriti IoT83 isc ivanti JAMF Jaspersoft jenkins JetBrains JFrog Joomla juniper Kaspersky KCFTech KeeperSecurity KNIME Kong KoreLogic krcert kubernetes larry_cashdollar lenovo Lexmark LGE libreswan Liferay linqi Linux Logitech M-Files Mattermost Mautic MediaTek Meta Microchip microsoft milestonesys Mirantis MON-CSIRT mongodb mozilla N-able naver NCSC.ch Neo4j netapp netflix NETGEAR NetScaler Netskope NI NLnet_Labs nodejs Nokia Nozomi Nutanix nvidia NX OAI OB obdev Octopus ODA odoo Okta Omnissa OnLogic OpenBMC openEuler openGauss OpenHarmony OpenNMS openssl OpenText OpenVPN Opera OPPO oracle OS-S OTRS OX Palantir palo_alto PangeaCyber PaperCut Patchstack Payara Pega Pentraze Perforce Phoenix php PingCAP PingIdentity PlexTrac postiz PRJBLK Profelis Profisee ProgressSoftware Proofpoint Proton PSF QCI qnap Qt qualcomm Qualys rami.io rapid7 RealPage Replicated Ribose RTI SailPoint Salesforce samsung.tv_appliance Samsung_Mobile sap Saviynt sba-research schneider SCHUTZWERK SDC Seagate seal SEC-VLab sec1 securepoint Securifera securin Semtech senhasegura ShopBeat SICK_AG Silabs Silver_Peak sirius SmileDigitalHealth SN Snow SNOW snyk Softing SoftIron SolarWinds Solidigm Sonatype sonicwall Sophos Spotfire Stackable STAR_Labs StrongDM Supermicro suse Swift symantec Synaptics Syncro synology Synopsys talos Tanium TCL_Smart_Terminal Tcpdump TeamViewer TECNOMobile Tego_Cyber Temporal tenable The_Missing_Link ThinkstAppliedResearch TianoCore tibco Tigera Toreon TPLink TR-CERT Trellix trendmicro tuxcare twcert TYPO3 Ubiquiti Unisoc Uniview upKeeper Vaadin Vestel Vivo vmware VulDB VulnCheck watchdog WatchGuard WDC_PSIRT wikimedia-foundation Wiz Wordfence WPScan WrenSecurity WSO2 XEN Xerox XI Xiaomi yandex Yugabyte Zabbix zdi zephyr Zohocorp Zoom Zowe Zscaler ZTE ZUSO_ART Zyxel
Latest vulnerabilities published by the CNAs operating under each root of the CVE Program.
-
CVE-2026-16141 2026-09-15OpenBMC IPMI Authentication Bypass via Default userKey and Stale Chal…
-
CVE-2026-16140 2026-09-15OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1
-
CVE-2026-1759 2026-09-15Improper handling of insufficient permissions or privileges vulnerabi…
-
CVE-2026-1758 2026-09-15Session Fixation
-
CVE-2026-90457 2026-09-11The administrative password is hashed using a comparatively weak, fas…
-
CVE-2026-90456 2026-09-11An example environment-configuration file for a bundled inventory-man…
-
CVE-2026-90455 2026-09-11A prior update that raised a bundled HTTP client library to a version…
-
CVE-2026-90454 2026-09-11A deployment mode intended to expose only read access to a bundled pa…
-
CVE-2026-90453 2026-09-11A file-upload handler redirects the authenticated client's browser to…
-
CVE-2026-90452 2026-09-11Requests from the reverse proxy to the identity-provider service for …
-
CVE-2026-89308 2026-09-15Arbitrary command execution in TrxTimeATTENDANCE
-
CVE-2026-92003 2026-09-15MISP Unthrottled Authentication Failure Log Writes Enable Resource Ex…
-
CVE-2026-92002 2026-09-15MISP: Authentication failure logging suppressed during Redis unavailability
-
CVE-2026-91859 2026-09-15MISP Access Log Entry Overwritten by Error Controller's Second before…
-
CVE-2026-91857 2026-09-15MISP: State-changing actions accessible via GET request enabling CSRF
-
CVE-2026-91851 2026-09-15MISP Dashboard Template ACL Bypass Due to VARCHAR-to-Integer Type Coe…
-
CVE-2026-91846 2026-09-15MISP Collection Element Add Missing Authorization on Referenced Object UUID
-
CVE-2026-91825 2026-09-15MISP: Missing Authorization Check for Event Sharing Group When Distri…
-
CVE-2026-91819 2026-09-15MISP: HTTP Method Override Bypasses CSRF and Form Validation in Bette…
-
CVE-2026-15600 2026-09-14SQL Injection in Alior Bank raty PrestaShop module
-
CVE-2026-19486 2026-09-11SSRF in Gemini Enterprise Agent Platform App Builder
-
CVE-2026-13745 2026-09-10Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables
-
CVE-2026-83530 2026-09-09Uncontrolled Memory Allocation in cel-go
-
CVE-2026-79696 2026-09-09Remote Code Execution in Google ADK for Python via Incomplete Standar…
-
CVE-2026-87593 2026-09-09Information leak in Editing in Google Chrome prior to 153.0.8010.36 a…
-
CVE-2026-87430 2026-09-09Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 all…
-
CVE-2026-87544 2026-09-09Incorrect authorization in Extensions in Google Chrome prior to 153.0…
-
CVE-2026-87601 2026-09-09Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed …
-
CVE-2026-87602 2026-09-09Out of bounds read in ANGLE in Google Chrome on on Windows prior to 1…
-
CVE-2026-87437 2026-09-09Information leak in Frames in Google Chrome prior to 153.0.8010.36 al…
-
CVE-2026-16141 2026-09-15OpenBMC IPMI Authentication Bypass via Default userKey and Stale Chal…
-
CVE-2026-16140 2026-09-15OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1
-
CVE-2026-1759 2026-09-15Improper handling of insufficient permissions or privileges vulnerabi…
-
CVE-2026-1758 2026-09-15Session Fixation
-
CVE-2026-90457 2026-09-11The administrative password is hashed using a comparatively weak, fas…
-
CVE-2026-90456 2026-09-11An example environment-configuration file for a bundled inventory-man…
-
CVE-2026-90455 2026-09-11A prior update that raised a bundled HTTP client library to a version…
-
CVE-2026-90454 2026-09-11A deployment mode intended to expose only read access to a bundled pa…
-
CVE-2026-90453 2026-09-11A file-upload handler redirects the authenticated client's browser to…
-
CVE-2026-90452 2026-09-11Requests from the reverse proxy to the identity-provider service for …
-
CVE-2026-90896 2026-09-14Missing authentication in Ecommerce Template checkout session endpoin…
-
CVE-2026-12258 2026-09-14Inadequate access control in the Hiperdino REST API
-
CVE-2026-84186 2026-09-07Incorrect access control in PrestaShop
-
CVE-2026-82911 2026-09-04CSRF in Prospero Flow CRM order confirmation allows unauthorized orde…
-
CVE-2026-76178 2026-09-03Multiple vulnerabilities in Ocsreports for OCS Inventory NG
-
CVE-2026-76177 2026-09-03Multiple vulnerabilities in Ocsreports for OCS Inventory NG
-
CVE-2026-76176 2026-09-03Multiple vulnerabilities in Ocsreports for OCS Inventory NG
-
CVE-2026-76175 2026-09-03Multiple vulnerabilities in Ocsreports for OCS Inventory NG
-
CVE-2026-76174 2026-09-03Multiple vulnerabilities in Ocsreports for OCS Inventory NG
-
CVE-2026-4813 2026-09-01Code injection in the Lutece Core
-
CVE-2026-80217 2026-09-15Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, whi…
-
CVE-2026-77853 2026-09-15Improper neutralization of special elements used in an OS command ('O…
-
CVE-2026-86701 2026-09-15Android application "ManabiPocket for Parents" contains an improper a…
-
CVE-2026-85125 2026-09-14The Android application "YAMAP -Social Trekking GPS App" contains an …
-
CVE-2026-82796 2026-09-14SolarView Compact contains a cross-site scripting vulnerability in Im…
-
CVE-2026-82795 2026-09-14SolarView Compact contains a cross-site scripting vulnerability in Sc…
-
CVE-2026-82794 2026-09-14SolarView Compact contains an OS command Injection vulnerability in i…
-
CVE-2026-82793 2026-09-14Unrestricted upload of file with dangerous type issue exists in Conte…
-
CVE-2026-82765 2026-09-14Path traversal vulnerability exists in Contec FX5000 series, FX4000 s…
-
CVE-2026-82792 2026-09-14Cross-site scripting vulnerability exists in Contec CAN 2.0B Communic…
-
CVE-2026-91835 2026-09-15OpenClaw ClawScan File Classifier static_scanner.go IsBinaryFile inte…
-
CVE-2026-89025 2026-09-15Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request
-
CVE-2026-59971 2026-09-15MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Ena…
-
CVE-2026-46495 2026-09-15OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI
-
CVE-2026-48722 2026-09-15Nextflow: Incorrect default permissions in the nextflow auth login command
-
CVE-2026-49254 2026-09-15Dragonfly Manager OAuth provider client_secret disclosure via unauthe…
-
CVE-2026-54637 2026-09-15Dragonfly scheduler v1 gRPC unauthenticated SSRF via attacker-control…
-
CVE-2026-92082 2026-09-15Payara Server is vulnerable to brute-force login attacks due to the a…
-
CVE-2026-90650 2026-09-15MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site …
-
CVE-2026-77179 2026-09-15Docker Sandboxes guest can write arbitrary macOS host files via a sym…
-
CVE-2026-91926 2026-09-15Gss-ntlmssp: gss-ntlmssp: memory leak in ntlm_decode_target_info via …
-
CVE-2026-91786 2026-09-15Gnome-shell: gnome-shell: out-of-bounds read in remote search icon re…
-
CVE-2026-80489 2026-09-15EUC_JISX0213 decoding may hang on crafted input
-
CVE-2026-77117 2026-09-15SHIFT_JISX0213 decoding may hang on crafted input
-
CVE-2026-86818 2026-09-15fast-uri vulnerable to mailto header injection via percent-encoded fi…
-
CVE-2026-86472 2026-09-15fast-uri vulnerable to inconsistent host case normalization via perce…
-
CVE-2026-75092 2026-09-15Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: s…
-
CVE-2026-90711 2026-09-15proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
-
CVE-2026-17495 2026-09-15moment vulnerable to Path Traversal via crafted non-string locale name
-
CVE-2026-81320 2026-09-15Hawtio-operator: hawtio-operator: tls private key written to operator…
-
CVE-2026-19614 2026-09-08XML External Entity (XXE) Injection in CyberELF NanoXML
-
CVE-2026-9007 2026-07-15Reflected XSS in HCL Notes
-
CVE-2026-13014 2026-07-13Remote Code Execution vulnerability in "Suspicious" application
-
CVE-2026-6805 2026-05-07Vulnerability on Cryptobox external sharing feature
-
CVE-2026-6501 2026-05-04Improper restriction of XML external entity reference vulnerability i…
-
CVE-2026-6500 2026-05-04Plaintext storage of a password vulnerability in ILM Informatique Ope…
-
CVE-2026-6499 2026-05-04Incorrect Permission Assignment for Critical Resource vulnerability i…
-
CVE-2026-5794 2026-04-28Vulnerability in Cryptobox allows an authenticated user to trigger an…
-
CVE-2026-3457 2026-03-27Stored XSS vulnerability in Sentinel ACC
-
CVE-2026-0872 2026-02-13Improper Certificate Validation vulnerability in Thales SafeNet Agent…
GCVE Numbering Authorities (GNAs) allocate vulnerability identifiers in their own namespace, without a central authority. This list is the local, signature-verified copy of the GCVE registry; the cards below cover this instance's own GNA and the feeds it pulls from other GNAs, following GCVE-BCP-03.
45
GNAs registered
3
GNA feeds pulled
397
Publications pulled
241
Published here (GNA-1)
-
GCVE-1-2026-20158 2026-09-15MISP Unthrottled Authentication Failure Log Writes Enable Resource Ex…
-
GCVE-1-2026-20172 2026-09-15MISP: Authentication failure logging suppressed during Redis unavailability
-
GCVE-1-2026-20138 2026-09-15MISP Access Log Entry Overwritten by Error Controller's Second before…
-
GCVE-1-2026-20242 2026-09-15MISP: State-changing actions accessible via GET request enabling CSRF
-
GCVE-1-2026-20010 2026-09-15MISP Dashboard Template ACL Bypass Due to VARCHAR-to-Integer Type Coe…
bcsec
GNA-128-
GCVE-128-2026-0001 2026-08-31Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure
AHA!
GNA-1337-
Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use
-
Open MQTT orchestration without read/write ACLs in Yarbo robot firmware
-
Hardcoded credentials in Yarbo robot firmware
-
Persistent undocumented backdoor access in Yarbo robot
-
NSA Ghidra Auto-Analysis Annotation Command Execution
VULNARCHIVE
GNA-1988-
GCVE-1988-2026-0382 2026-09-11Dovecot Security Advisory 3/2026
-
GCVE-1988-2026-0381 2026-09-11Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation
-
GCVE-1988-2026-0380 2026-09-11FD - Half-click unauthenticated remote code execution on Horde Groupw…
-
GCVE-1988-2026-0379 2026-09-11[ADVISORY] Multiple Integer Overflows in U-Boot Filesystem Parsing (C…
-
GCVE-1988-2026-0378 2026-09-11CyberDanube Security Research 20260611-0 | Multiple Denial of Service…
GCVE registry
| GNA | Organization | Publications | Services |
|---|---|---|---|
| GNA-1 This instance |
CIRCL
circl
Computer Incident Response Center Luxembourg
|
241 | |
| GNA-128 Pulled |
bcsec
Bertoldi Cybersecurity
|
1 | |
| GNA-1337 Pulled |
AHA!
Austin Hackers Anonymous
|
9 | |
| GNA-1988 Pulled |
VULNARCHIVE
Vulnerability Disclosure Archive
|
387 | |
| GNA-0 |
CVE
CVE ProgramThis GCVE GNA ID is used as a prefix and MUST be followed by the official CVE ID.
|
— | |
| GNA-2 |
EUVD
European Union Vulnerability Database
|
— | |
| GNA-3 |
Red Hat
redhat
Red Hat Inc.
|
— | |
| GNA-25 |
exim
Exim
Exim Project
|
— | |
| GNA-69 |
CESNET-CERTS
CSIRT of Czech NREN
|
— | |
| GNA-79 |
SWISSCOM
swisscom
Swisscom (Schweiz) AG
|
— | |
| GNA-100 |
VulDB
vuldb
vuldb.com
|
— | |
| GNA-101 |
ERIC
Ericsson
Ericsson AB
|
— | |
| GNA-102 |
EACG
Enterprise Architecture Consulting Group
|
— | |
| GNA-103 |
SCHUTZWERK
SCHUTZWERK
SCHUTZWERK GmbH
|
— | |
| GNA-104 |
AboutCode.org
aboutcode-org
AboutCode Europe ASBL
|
— | |
| GNA-105 |
OPC
OPC Foundation
|
— | |
| GNA-106 |
SK-CERT
National Cyber Security Centre SK-CERT
|
— | |
| GNA-107 |
THA-PSIRT
thalesgroup
Thales PSIRT
|
— | |
| GNA-108 |
Securin
Securin Inc
|
— | |
| GNA-109 |
concinnity-risks
Concinnity Risks LLC
|
— | |
| GNA-110 |
VVD
Vulnetix Vulnerability Database
|
— | |
| GNA-111 |
MOGWAILABS
MOGWAI LABS GmbH
|
— | |
| GNA-112 |
CERT-QC
Ministère de la Cybersécurité et du Numérique – CERT-QC
|
— | |
| GNA-113 |
Krones
Krones AG
|
— | |
| GNA-114 |
siemens
siemens
Siemens
|
— | |
| GNA-115 |
Adrian Dacka
syrex1013
Adrian "syrex1013" Dacka
|
— | |
| GNA-116 |
FLAT
Fluid Attacks
|
— | |
| GNA-117 |
Moksha
Moksha
|
— | |
| GNA-118 |
Nozomi Networks
nozominetworks
Nozomi Networks, Inc.
|
— | |
| GNA-119 |
olearysec
olearysec.com Security Research
|
— | |
| GNA-120 |
eef
Erlang Ecosystem Foundation
|
— | |
| GNA-121 |
Passbolt
Passbolt SA
|
— | |
| GNA-122 |
OneSpan
OneSpan Inc.
|
— | |
| GNA-123 |
CI-ISAC Australia
CI-ISAC Australia Ltd
|
— | |
| GNA-124 |
SUSE
suse
SUSE Software Solutions Germany GmbH
|
— | |
| GNA-125 |
Postiz
gitroomhq
Postiz
|
— | |
| GNA-126 |
cvdportal
CVD Portal
|
— | |
| GNA-127 |
HackRTU
HackRTU
|
— | |
| GNA-404 |
VulnCheck
VulnCheck Inc.
|
— | |
| GNA-680 |
DFN-CERT
DFN-CERT Services GmbH
|
— | |
| GNA-1291 |
NCSC-CH
National Cyber Security Centre (NCSC) - Switzerland
|
— | |
| GNA-2342 |
Pentagrid
Pentagrid AG
|
— | |
| GNA-31337 |
Talos
Cisco Talos
|
— | |
| GNA-65530 |
GCVE-CVE-Extension
GNA Dedicated to CVE Extension and Proposal - ID must be aligned with CVE ID reference
|
— | |
| GNA-65535 |
TEST-GNA-GCVE
GNA id used for testing onlyThis GNA ID is reserved for testing purposes. It may appear in publications generated by instances testing the publication process; however, any content produced using this GNA ID MUST NOT be considered valid.
|
— |