Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Minimum sightings per line
1
2
3
4
5
Loading…
Loading…
Loading…
Loading…
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
CVE Program structure
Structure on cve.orgThis diagram is rendered live from the CNA partner catalogue stored in our database, synchronized from cve.org via GCVE — not a static image.
-
42Gears ABB ADI AMI arcinfo Armis ASR ASRG ASUS azure-access B.Braun BAE Baxter BD BECDX BECLS BHV bosch Carrier CEP CODRA Cribl CTOne CyberDanube Cytiva Danfoss Deltaww Digi Dragos eclypsium Entrust Gallagher GE_Healthcare GE_Vernova Hackrate HemoCue Hitachi_Energy Hologic Honeywell hsi IDBS IDT-DNA jci JupiterOne LeicaBiosystems Leonardo LMS Medtronic MHV MIM MolDev Moxa MyMMT NetRise NIBEGroup OMICRON ONEKEY Pall Philips PTC Radiometer Roche Rockwell runZero SCIEX Secomea SEL siemens Simplinx SOCRadar SRA Stryker tlt_net TMUS TRO TXOne Vantive Verizon vx WindRiver wolfSSL XONA Xylem
-
CERTVDE CNA 0 CNAs
-
- 1 CNAs directly under CISA
-
376 CNAs directly under mitre
2N 9front @huntr_ai Absolute Acer Acronis adobe AHA airbus Airlock AlgoSec alibaba Almaviva Altera Altium AMD Ampere AMZN Anolis Antenna Anthropic apache AppCheck apple ARCON Arista Arm Arxscan ASUSTOR atlassian autodesk Automox avaya Axis AxxonSoft Baidu BCNY bcorg Bitdefender bizerba blackberry BlackDuck BLSOPS BombadilSystems brocade BT Bugcrowd ByteDance ca Caliptra Canon_EMEA canonical Canva Cato Censys Centreon CERT-In certcc Checkmarx Checkmk checkpoint Ciena cirosec cisco Citrix ClickHouse cloudflare Commvault ConcreteCMS ConnectWise CoolKit Crafter_CMS Crestron CrowdStrike CSA CSAI CSW CyberArk cygence Cynet dahua Dassault_Systemes debian Delinea dell DevCycle DEVOLUTIONS Dfinity DHIS2 directcyber Docker dotCMS Dremio drupal DSF DTEX DualVS EA Eaton Echo eclipse EDB EEF ELAN elastic ERIC Esri Everpure ExtremeNetworks F5 Fidelis flexera floragunn Fluid_Attacks forcepoint Forescout fortinet Fortra Foxit freebsd FSI FSOFT FTI FULL GEN Genetec Gitea GitHub_M GitHub_P GitLab GRAFANA GreenRocketSecurity GV hackerone Halborn Hanwha_Vision HashiCorp HCL HeroDevs HiddenLayer hikvision Hillstone Hitachi_Vantara Honor hp hpe huawei Huntress HYPR ibm ICT IDEMIA Illumio imaginationtech iManage INCD Insyde intel Intigriti IoT83 isc ivanti JAMF Jaspersoft jenkins JetBrains JFrog Joomla juniper Kaspersky KCFTech KeeperSecurity KNIME Kong KoreLogic krcert kubernetes larry_cashdollar lenovo Lexmark LGE libreswan Liferay linqi Linux Logitech M-Files Mattermost Mautic MediaTek Meta Microchip microsoft milestonesys Mirantis MON-CSIRT mongodb mozilla N-able naver NCSC.ch Neo4j netapp netflix NETGEAR NetScaler Netskope NI NLnet_Labs nodejs Nokia Nozomi Nutanix nvidia NX OAI OB obdev Octopus ODA odoo Okta Omnissa OnLogic OpenBMC openEuler openGauss OpenHarmony OpenNMS openssl OpenText OpenVPN Opera OPPO oracle OS-S OTRS OX Palantir palo_alto PangeaCyber PaperCut Patchstack Payara Pega Pentraze Perforce Phoenix php PingCAP PingIdentity PlexTrac postiz PRJBLK Profelis Profisee ProgressSoftware Proofpoint Proton PSF QCI qnap Qt qualcomm Qualys rami.io rapid7 RealPage Replicated Ribose RTI SailPoint Salesforce samsung.tv_appliance Samsung_Mobile sap Saviynt sba-research schneider SCHUTZWERK SDC Seagate seal SEC-VLab sec1 securepoint Securifera securin Semtech senhasegura ShopBeat SICK_AG Silabs Silver_Peak sirius SmileDigitalHealth SN Snow SNOW snyk Softing SoftIron SolarWinds Solidigm Sonatype sonicwall Sophos Spotfire Stackable STAR_Labs StrongDM Supermicro suse Swift symantec Synaptics Syncro synology Synopsys talos Tanium TCL_Smart_Terminal Tcpdump TeamViewer TECNOMobile Tego_Cyber Temporal tenable The_Missing_Link ThinkstAppliedResearch TianoCore tibco Tigera Toreon TPLink TR-CERT Trellix trendmicro tuxcare twcert TYPO3 Ubiquiti Unisoc Uniview upKeeper Vaadin Vestel Vivo vmware VulDB VulnCheck watchdog WatchGuard WDC_PSIRT wikimedia-foundation Wiz Wordfence WPScan WrenSecurity WSO2 XEN Xerox XI Xiaomi yandex Yugabyte Zabbix zdi zephyr Zohocorp Zoom Zowe Zscaler ZTE ZUSO_ART Zyxel
Latest vulnerabilities published by the CNAs operating under each root of the CVE Program.
-
CVE-2026-75754 2026-09-04Missing Authentication for Critical Function, Server-Side Request For…
-
CVE-2026-6071 2026-09-03Code Execution Vulnerability in Arena®
-
CVE-2026-79679 2026-09-03Use of Weak Credentials
-
CVE-2026-80465 2026-09-03A vulnerability has been identified in Mendix SAML (Mendix 10 compati…
-
CVE-2024-7956 2026-09-02Sensitive Data Exposure and Escalating Privileges Vulnerabilities in …
-
CVE-2026-79991 2026-09-02Authenticated SQL Injection via nested eager-loading criteria
-
CVE-2026-79990 2026-09-02GQL entry mutation `siteId` bypasses schema site scope, enabling cros…
-
CVE-2026-79989 2026-09-02Arbitrary user password reset leading to administrator account takeover
-
CVE-2026-81846 2026-09-01runZero MCP 'Findings summaries' Data Leak
-
CVE-2024-7953 2026-09-01DataEdgePlatform DataMosaix™ Private Cloud
-
CVE-2026-85242 2026-09-03Server-Side Request Forgery via Favicon Redirect to Local Network Res…
-
CVE-2026-85239 2026-09-03MISP Event Template Definition Validation Bypass Allows Persistent De…
-
CVE-2026-85238 2026-09-03Session Fixation in MISP CustomAuth Authentication Allows Session Hijacking
-
CVE-2026-85237 2026-09-03Missing Rate Limiting in Email OTP Verification Allows Brute-Force Au…
-
CVE-2026-85236 2026-09-03MISP cullEmptyEvents CSRF Allows Irreversible Deletion of Events via …
-
CVE-2026-85230 2026-09-03MISP Dashboard Button Widget Allows Persistent JavaScript URL Injection
-
CVE-2026-85227 2026-09-03Reflected Cross-Site Scripting in MISP Event Filtering via taggedAttr…
-
CVE-2026-85226 2026-09-03MISP OnDemand Correlation Engine Missing Access Control Allows Disclo…
-
CVE-2026-85221 2026-09-03MISP CurlClient TLS Peer Verification Disabled by Default Enables Man…
-
CVE-2026-85216 2026-09-03MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials
-
CVE-2026-85044 2026-09-03Use of released resource in Mobile in Google Chrome on on Android pri…
-
CVE-2026-85047 2026-09-03Improper input validation in Transactions Platform in Google Chrome o…
-
CVE-2026-85051 2026-09-03Type confusion in Compositing in Google Chrome prior to 152.0.7977.82…
-
CVE-2026-85049 2026-09-03Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowe…
-
CVE-2026-85042 2026-09-03Use after free in DevTools in Google Chrome prior to 152.0.7977.82 al…
-
CVE-2026-85053 2026-09-03Improper resource exposure in CacheStorage in Google Chrome prior to …
-
CVE-2026-85050 2026-09-03Out of bounds write in WebGL in Google Chrome on on Android prior to …
-
CVE-2026-85045 2026-09-03Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed …
-
CVE-2026-85048 2026-09-03Use after free in Compositing in Google Chrome prior to 152.0.7977.82…
-
CVE-2026-85043 2026-09-03Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82…
-
CVE-2026-75754 2026-09-04Missing Authentication for Critical Function, Server-Side Request For…
-
CVE-2026-6071 2026-09-03Code Execution Vulnerability in Arena®
-
CVE-2026-79679 2026-09-03Use of Weak Credentials
-
CVE-2026-80465 2026-09-03A vulnerability has been identified in Mendix SAML (Mendix 10 compati…
-
CVE-2024-7956 2026-09-02Sensitive Data Exposure and Escalating Privileges Vulnerabilities in …
-
CVE-2026-79991 2026-09-02Authenticated SQL Injection via nested eager-loading criteria
-
CVE-2026-79990 2026-09-02GQL entry mutation `siteId` bypasses schema site scope, enabling cros…
-
CVE-2026-79989 2026-09-02Arbitrary user password reset leading to administrator account takeover
-
CVE-2026-81846 2026-09-01runZero MCP 'Findings summaries' Data Leak
-
CVE-2024-7953 2026-09-01DataEdgePlatform DataMosaix™ Private Cloud
-
CVE-2026-76178 2026-09-03Multiple vulnerabilities in Ocsreports for OCS Inventory NG
-
CVE-2026-76177 2026-09-03Multiple vulnerabilities in Ocsreports for OCS Inventory NG
-
CVE-2026-76176 2026-09-03Multiple vulnerabilities in Ocsreports for OCS Inventory NG
-
CVE-2026-76175 2026-09-03Multiple vulnerabilities in Ocsreports for OCS Inventory NG
-
CVE-2026-76174 2026-09-03Multiple vulnerabilities in Ocsreports for OCS Inventory NG
-
CVE-2026-4813 2026-09-01Code injection in the Lutece Core
-
CVE-2026-84165 2026-09-01Lack of authorisation in OpenNebula by OpenNebula Systems
-
CVE-2026-81931 2026-08-27Unrestricted upload of file with dangerous type in Prospero Flow CRM …
-
CVE-2026-81677 2026-08-27Multiple Vulnerabilities in TOOOLS' iSquad
-
CVE-2026-81676 2026-08-27Multiple Vulnerabilities in TOOOLS' iSquad
-
CVE-2026-82918 2026-09-03XG VisionTerminal and XG-X VisionTerminal provided by Keyence Corpora…
-
CVE-2026-80253 2026-09-03An improper physical access control issue exists in ShizenBox2 (dev-c…
-
CVE-2026-80254 2026-09-03Authorization bypass through user-controlled key issue exists in Shiz…
-
CVE-2026-53620 2026-08-31GROWI contains a vulnerability with an authorization bypass through u…
-
CVE-2026-68951 2026-08-31GROWI contains an incorrect authorization vulnerability. If this vuln…
-
CVE-2026-78032 2026-08-28SOY CMS contains an issue with deserialization of untrusted data. An…
-
CVE-2026-78238 2026-08-28SOY Gallery contains a cross-site scripting vulnerability. An arbitr…
-
CVE-2026-77838 2026-08-28SOY Calendar contains a cross-site scripting vulnerability. An arbitr…
-
CVE-2026-73827 2026-08-28SOY Calendar contains a cross-site scripting vulnerability. An arbitr…
-
CVE-2026-76149 2026-08-26CorvusSKK contains an integer overflow vulnerability, which may allow…
-
CVE-2026-85405 2026-09-04Eleveo Call Recording Software roleAddAction.do cross site scripting
-
CVE-2026-85403 2026-09-04code-projects Doctor Appointment System contactus.php sql injection
-
CVE-2026-85402 2026-09-04code-projects Doctor Appointment System booking.php sql injection
-
CVE-2026-85401 2026-09-04Dolibarr Legacy File Manager config.inc.php access control
-
CVE-2026-85149 2026-09-04Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
-
CVE-2026-85148 2026-09-04Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
-
CVE-2026-85147 2026-09-04Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
-
CVE-2026-85146 2026-09-04Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
-
CVE-2026-85399 2026-09-04code-projects Hospital Information System PrespController.php getSing…
-
CVE-2026-85398 2026-09-04code-projects Hospital Information System viewReq.php viewReq sql injection
-
CVE-2026-84185 2026-09-03Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset…
-
CVE-2026-85458 2026-09-03Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph
-
CVE-2026-71224 2026-09-03Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metada…
-
CVE-2026-71222 2026-09-03Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_…
-
CVE-2026-71221 2026-09-03Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked heigh…
-
CVE-2026-71220 2026-09-03Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_he…
-
CVE-2026-71219 2026-09-03Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in has…
-
CVE-2026-85124 2026-09-03@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments
-
CVE-2026-85150 2026-09-03Gstreamer1-plugins-base: gstreamer: null/invalid-pointer dereference …
-
CVE-2026-84394 2026-09-02fast-uri vulnerable to host confusion via an unclosed bracket in the …
-
CVE-2026-9007 2026-07-15Reflected XSS in HCL Notes
-
CVE-2026-13014 2026-07-13Remote Code Execution vulnerability in "Suspicious" application
-
CVE-2026-6805 2026-05-07Vulnerability on Cryptobox external sharing feature
-
CVE-2026-6501 2026-05-04Improper restriction of XML external entity reference vulnerability i…
-
CVE-2026-6500 2026-05-04Plaintext storage of a password vulnerability in ILM Informatique Ope…
-
CVE-2026-6499 2026-05-04Incorrect Permission Assignment for Critical Resource vulnerability i…
-
CVE-2026-5794 2026-04-28Vulnerability in Cryptobox allows an authenticated user to trigger an…
-
CVE-2026-3457 2026-03-27Stored XSS vulnerability in Sentinel ACC
-
CVE-2026-0872 2026-02-13Improper Certificate Validation vulnerability in Thales SafeNet Agent…
-
CVE-2026-2344 2026-02-11Stored XSS on Plunet BusinessManager
GCVE Numbering Authorities (GNAs) allocate vulnerability identifiers in their own namespace, without a central authority. This list is the local, signature-verified copy of the GCVE registry; the cards below cover this instance's own GNA and the feeds it pulls from other GNAs, following GCVE-BCP-03.
44
GNAs registered
2
GNA feeds pulled
10
Publications pulled
209
Published here (GNA-1)
-
GCVE-1-2026-20103 2026-07-05Authenticated Path Traversal in AIL Framework PDF Object Handling Ena…
-
GCVE-1-2026-20055 2026-07-05Unauthenticated arbitrary MongoDB collection read in cve-search
-
GCVE-1-2026-20131 2026-06-22AIL Framework - Missing Rate Limiting Enables Brute-Force Attacks Aga…
-
GCVE-1-2026-20088 2026-06-22Authenticated Path Traversal in AIL Framework Investigation Downloads…
-
GCVE-1-2026-20105 2026-06-22MISP remote code execution via arbitrary rdkafka configuration path
bcsec
GNA-128-
GCVE-128-2026-0001 2026-08-31Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure
AHA!
GNA-1337-
Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use
-
Open MQTT orchestration without read/write ACLs in Yarbo robot firmware
-
Hardcoded credentials in Yarbo robot firmware
-
Persistent undocumented backdoor access in Yarbo robot
-
NSA Ghidra Auto-Analysis Annotation Command Execution
GCVE registry
| GNA | Organization | Publications | Services |
|---|---|---|---|
| GNA-1 This instance |
CIRCL
circl
Computer Incident Response Center Luxembourg
|
209 | |
| GNA-128 Pulled |
bcsec
Bertoldi Cybersecurity
|
1 | |
| GNA-1337 Pulled |
AHA!
Austin Hackers Anonymous
|
9 | |
| GNA-0 |
CVE
CVE ProgramThis GCVE GNA ID is used as a prefix and MUST be followed by the official CVE ID.
|
— | |
| GNA-2 |
EUVD
European Union Vulnerability Database
|
— | |
| GNA-3 |
Red Hat
redhat
Red Hat Inc.
|
— | |
| GNA-25 |
exim
Exim
Exim Project
|
— | |
| GNA-69 |
CESNET-CERTS
CSIRT of Czech NREN
|
— | |
| GNA-79 |
SWISSCOM
swisscom
Swisscom (Schweiz) AG
|
— | |
| GNA-100 |
VulDB
vuldb
vuldb.com
|
— | |
| GNA-101 |
ERIC
Ericsson
Ericsson AB
|
— | |
| GNA-102 |
EACG
Enterprise Architecture Consulting Group
|
— | |
| GNA-103 |
SCHUTZWERK
SCHUTZWERK
SCHUTZWERK GmbH
|
— | |
| GNA-104 |
AboutCode.org
aboutcode-org
AboutCode Europe ASBL
|
— | |
| GNA-105 |
OPC
OPC Foundation
|
— | |
| GNA-106 |
SK-CERT
National Cyber Security Centre SK-CERT
|
— | |
| GNA-107 |
THA-PSIRT
thalesgroup
Thales PSIRT
|
— | |
| GNA-108 |
Securin
Securin Inc
|
— | |
| GNA-109 |
concinnity-risks
Concinnity Risks LLC
|
— | |
| GNA-110 |
VVD
Vulnetix Vulnerability Database
|
— | |
| GNA-111 |
MOGWAILABS
MOGWAI LABS GmbH
|
— | |
| GNA-112 |
CERT-QC
Ministère de la Cybersécurité et du Numérique – CERT-QC
|
— | |
| GNA-113 |
Krones
Krones AG
|
— | |
| GNA-114 |
siemens
siemens
Siemens
|
— | |
| GNA-115 |
Adrian Dacka
syrex1013
Adrian "syrex1013" Dacka
|
— | |
| GNA-116 |
FLAT
Fluid Attacks
|
— | |
| GNA-117 |
Moksha
Moksha
|
— | |
| GNA-118 |
Nozomi Networks
nozominetworks
Nozomi Networks, Inc.
|
— | |
| GNA-119 |
olearysec
olearysec.com Security Research
|
— | |
| GNA-120 |
eef
Erlang Ecosystem Foundation
|
— | |
| GNA-121 |
Passbolt
Passbolt SA
|
— | |
| GNA-122 |
OneSpan
OneSpan Inc.
|
— | |
| GNA-123 |
CI-ISAC Australia
CI-ISAC Australia Ltd
|
— | |
| GNA-124 |
SUSE
suse
SUSE Software Solutions Germany GmbH
|
— | |
| GNA-125 |
Postiz
gitroomhq
Postiz
|
— | |
| GNA-126 |
cvdportal
CVD Portal
|
— | |
| GNA-127 |
HackRTU
HackRTU
|
— | |
| GNA-404 |
VulnCheck
VulnCheck Inc.
|
— | |
| GNA-680 |
DFN-CERT
DFN-CERT Services GmbH
|
— | |
| GNA-1291 |
NCSC-CH
National Cyber Security Centre (NCSC) - Switzerland
|
— | |
| GNA-2342 |
Pentagrid
Pentagrid AG
|
— | |
| GNA-31337 |
Talos
Cisco Talos
|
— | |
| GNA-65530 |
GCVE-CVE-Extension
GNA Dedicated to CVE Extension and Proposal - ID must be aligned with CVE ID reference
|
— | |
| GNA-65535 |
TEST-GNA-GCVE
GNA id used for testing onlyThis GNA ID is reserved for testing purposes. It may appear in publications generated by instances testing the publication process; however, any content produced using this GNA ID MUST NOT be considered valid.
|
— |