Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Minimum sightings per line
1
2
3
4
5
Loading…
Loading…
Loading…
Loading…
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
CVE Program structure
Structure on cve.orgThis diagram is rendered live from the CNA partner catalogue stored in our database, synchronized from cve.org via GCVE — not a static image.
-
42Gears ABB ADI AMI arcinfo Armis ASR ASRG ASUS azure-access B.Braun BAE Baxter BD BECDX BECLS BHV bosch Carrier CEP CODRA Cribl CTOne CyberDanube Cytiva Danfoss Deltaww Digi Dragos eclypsium Entrust Gallagher GE_Healthcare GE_Vernova Hackrate HemoCue Hitachi_Energy Hologic Honeywell hsi IDBS IDT-DNA jci JupiterOne LeicaBiosystems Leonardo LMS Medtronic MHV MIM MolDev Moxa MyMMT NetRise NIBEGroup OMICRON ONEKEY Pall Philips PTC Radiometer Roche Rockwell runZero SCIEX Secomea SEL siemens Simplinx SOCRadar SRA Stryker tlt_net TMUS TRO TXOne Vantive Verizon vx WindRiver wolfSSL XONA Xylem
-
CERTVDE CNA 0 CNAs
-
- 1 CNAs directly under CISA
-
376 CNAs directly under mitre
2N 9front @huntr_ai Absolute Acer Acronis adobe AHA airbus Airlock AlgoSec alibaba Almaviva Altera Altium AMD Ampere AMZN Anolis Antenna Anthropic apache AppCheck apple ARCON Arista Arm Arxscan ASUSTOR atlassian autodesk Automox avaya Axis AxxonSoft Baidu BCNY bcorg Bitdefender bizerba blackberry BlackDuck BLSOPS BombadilSystems brocade BT Bugcrowd ByteDance ca Caliptra Canon_EMEA canonical Canva Cato Censys Centreon CERT-In certcc Checkmarx Checkmk checkpoint Ciena cirosec cisco Citrix ClickHouse cloudflare Commvault ConcreteCMS ConnectWise CoolKit Crafter_CMS Crestron CrowdStrike CSA CSAI CSW CyberArk cygence Cynet dahua Dassault_Systemes debian Delinea dell DevCycle DEVOLUTIONS Dfinity DHIS2 directcyber Docker dotCMS Dremio drupal DSF DTEX DualVS EA Eaton Echo eclipse EDB EEF ELAN elastic ERIC Esri Everpure ExtremeNetworks F5 Fidelis flexera floragunn Fluid_Attacks forcepoint Forescout fortinet Fortra Foxit freebsd FSI FSOFT FTI FULL GEN Genetec Gitea GitHub_M GitHub_P GitLab GRAFANA GreenRocketSecurity GV hackerone Halborn Hanwha_Vision HashiCorp HCL HeroDevs HiddenLayer hikvision Hillstone Hitachi_Vantara Honor hp hpe huawei Huntress HYPR ibm ICT IDEMIA Illumio imaginationtech iManage INCD Insyde intel Intigriti IoT83 isc ivanti JAMF Jaspersoft jenkins JetBrains JFrog Joomla juniper Kaspersky KCFTech KeeperSecurity KNIME Kong KoreLogic krcert kubernetes larry_cashdollar lenovo Lexmark LGE libreswan Liferay linqi Linux Logitech M-Files Mattermost Mautic MediaTek Meta Microchip microsoft milestonesys Mirantis MON-CSIRT mongodb mozilla N-able naver NCSC.ch Neo4j netapp netflix NETGEAR NetScaler Netskope NI NLnet_Labs nodejs Nokia Nozomi Nutanix nvidia NX OAI OB obdev Octopus ODA odoo Okta Omnissa OnLogic OpenBMC openEuler openGauss OpenHarmony OpenNMS openssl OpenText OpenVPN Opera OPPO oracle OS-S OTRS OX Palantir palo_alto PangeaCyber PaperCut Patchstack Payara Pega Pentraze Perforce Phoenix php PingCAP PingIdentity PlexTrac postiz PRJBLK Profelis Profisee ProgressSoftware Proofpoint Proton PSF QCI qnap Qt qualcomm Qualys rami.io rapid7 RealPage Replicated Ribose RTI SailPoint Salesforce samsung.tv_appliance Samsung_Mobile sap Saviynt sba-research schneider SCHUTZWERK SDC Seagate seal SEC-VLab sec1 securepoint Securifera securin Semtech senhasegura ShopBeat SICK_AG Silabs Silver_Peak sirius SmileDigitalHealth SN Snow SNOW snyk Softing SoftIron SolarWinds Solidigm Sonatype sonicwall Sophos Spotfire Stackable STAR_Labs StrongDM Supermicro suse Swift symantec Synaptics Syncro synology Synopsys talos Tanium TCL_Smart_Terminal Tcpdump TeamViewer TECNOMobile Tego_Cyber Temporal tenable The_Missing_Link ThinkstAppliedResearch TianoCore tibco Tigera Toreon TPLink TR-CERT Trellix trendmicro tuxcare twcert TYPO3 Ubiquiti Unisoc Uniview upKeeper Vaadin Vestel Vivo vmware VulDB VulnCheck watchdog WatchGuard WDC_PSIRT wikimedia-foundation Wiz Wordfence WPScan WrenSecurity WSO2 XEN Xerox XI Xiaomi yandex Yugabyte Zabbix zdi zephyr Zohocorp Zoom Zowe Zscaler ZTE ZUSO_ART Zyxel
Latest vulnerabilities published by the CNAs operating under each root of the CVE Program.
-
CVE-2026-19398 2026-08-27“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash S…
-
CVE-2026-75960 2026-08-26Insufficiently Protected Credentials in Rently Smart Home
-
CVE-2026-15203 2026-08-26Debug interfaces are accessible by default in Danfoss iC7 Automation …
-
CVE-2026-75498 2026-08-25Webkul QloApps SQL injection
-
CVE-2026-75497 2026-08-25Webkul QloApps SQL injection
-
CVE-2026-75496 2026-08-25Webkul QloApps improper file upload validation
-
CVE-2026-63587 2026-08-25SMS Password Authorization Bypass via Failed Attempt Counter
-
CVE-2026-63586 2026-08-25Unauthenticated Remote Code Execution via Shell Injection in Web Mana…
-
CVE-2026-34491 2026-08-24Improper neutralization of input during web page generation ('cross-s…
-
CVE-2026-78416 2026-08-24Authenticated RCE via `condition.config` JSON cleanse bypass
-
CVE-2026-16599 2026-08-25Denial of Service in GNU wget
-
CVE-2026-78555 2026-08-24RansomLook API Key Disclosure Through /admin/apikeys HTML Source
-
CVE-2026-78553 2026-08-24Insecure Flask Secret-Key File Permissions Allow Local Administrator …
-
CVE-2026-78551 2026-08-24RansomLook Login Endpoint Allows Timing-Based Username Enumeration an…
-
CVE-2026-78391 2026-08-24Stored Cross-Site Scripting via Untrusted Cryptocurrency Address Rend…
-
CVE-2026-78387 2026-08-24RansomLook Missing Authorization in Web Configuration Editor Allows A…
-
CVE-2026-78386 2026-08-24Unauthenticated Disclosure of Scraping Credentials and Bypass Configu…
-
CVE-2026-78385 2026-08-24RansomLook Analysis PDF Generation Allows Server-Side Request Forgery…
-
CVE-2026-78381 2026-08-24RansomLook Arbitrary File Read via Path Traversal in Post screen Field
-
CVE-2026-78380 2026-08-24Private Group and Market Posts Disclosed Through Public Notification …
-
CVE-2026-19485 2026-08-26Bucket Squatting in Vertex AI Search for Commerce
-
CVE-2026-75062 2026-08-26Eval Injection in google/langfun via default lf.query protocol
-
CVE-2026-12717 2026-08-26Remote Code Execution in BigQuery Data Transfer Service via JDBC Conn…
-
CVE-2026-78964 2026-08-25Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977…
-
CVE-2026-78914 2026-08-25Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.6…
-
CVE-2026-79254 2026-08-25Incorrect reference resolution in CustomTabs in Google Chrome on on A…
-
CVE-2026-79260 2026-08-25Improper input validation in Cookies in Google Chrome prior to 152.0.…
-
CVE-2026-79253 2026-08-25Improper input validation in Network in Google Chrome on on Windows p…
-
CVE-2026-78915 2026-08-25Race condition in Enterprise in Google Chrome on on Windows prior to …
-
CVE-2026-79126 2026-08-25Incorrect provision of specified functionality in Proxy in Google Chr…
-
CVE-2026-19398 2026-08-27“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash S…
-
CVE-2026-75960 2026-08-26Insufficiently Protected Credentials in Rently Smart Home
-
CVE-2026-15203 2026-08-26Debug interfaces are accessible by default in Danfoss iC7 Automation …
-
CVE-2026-63587 2026-08-25SMS Password Authorization Bypass via Failed Attempt Counter
-
CVE-2026-63586 2026-08-25Unauthenticated Remote Code Execution via Shell Injection in Web Mana…
-
CVE-2026-34491 2026-08-24Improper neutralization of input during web page generation ('cross-s…
-
CVE-2026-78416 2026-08-24Authenticated RCE via `condition.config` JSON cleanse bypass
-
CVE-2026-78317 2026-08-24DIAEnergie - SQL Injection
-
CVE-2026-78316 2026-08-24DIAEnergie - SQL Injection
-
CVE-2026-78315 2026-08-24DIAEnergie - SQL Injection
-
CVE-2026-12587 2026-08-26Embedded credentials in Virtuagym
-
CVE-2026-12600 2026-08-25Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder
-
CVE-2026-78365 2026-08-24IDOR and missing authorization in Prospero Flow CRM supplier API allo…
-
CVE-2026-78337 2026-08-24Unrestricted upload of file with dangerous type in Prospero Flow CRM …
-
CVE-2026-77780 2026-08-21Unvalidated bank account and card foreign keys in the Prospero Flow C…
-
CVE-2026-77759 2026-08-21IDOR and missing authorization in the Prospero Flow CRM transaction A…
-
CVE-2026-76203 2026-08-19CSS sanitizer bypass in Pentestify report themes allows forced outbou…
-
CVE-2026-75872 2026-08-18HTML Injection in MailerUp double opt-in verification email
-
CVE-2026-19871 2026-08-14Use of hard-coded credentials in Prospero Flow CRM employee onboarding
-
CVE-2026-19870 2026-08-14IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and …
-
CVE-2026-76149 2026-08-26CorvusSKK contains an integer overflow vulnerability, which may allow…
-
CVE-2026-76148 2026-08-26CorvusSKK contains a code injection vulnerability, which may lead to …
-
CVE-2026-73335 2026-08-26Android application "Myna Point" is vulnerable to Improper Authorizat…
-
CVE-2026-59769 2026-08-25FA-50 all versions contain hard-coded credentials. An attacker, who …
-
CVE-2026-67578 2026-08-25FA-50 all versions miss authentication for some configuration. An at…
-
CVE-2026-68959 2026-08-25SKYSEA Client View and SKYMEC IT Manager contain a path traversal vul…
-
CVE-2026-68062 2026-08-25SKYSEA Client View and SKYMEC IT Manager contain a path traversal vul…
-
CVE-2026-66109 2026-08-25A missing authorization vulnerability exists in SKYSEA Client View an…
-
CVE-2026-68960 2026-08-25A stack-based buffer overflow vulnerability exists in SKYSEA Client V…
-
CVE-2026-69665 2026-08-25SKYSEA Client View and SKYMEC IT Manager contain an issue with incorr…
-
CVE-2026-81486 2026-08-27bsmi021 mcp-file-context-server Path Resolution index.ts read_context…
-
CVE-2026-81485 2026-08-27danielpopamd linkedin-ads-mcp Media Upload campaign-management.ts fs.…
-
CVE-2026-47874 2026-08-26Reactor Netty HTTP Server Denial of Service With Pipelined Requests
-
CVE-2026-47861 2026-08-26UDP adapter sends ack to attacker-supplied host:port parsed from pack…
-
CVE-2026-81421 2026-08-26ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-side request forgery
-
CVE-2026-47863 2026-08-26Reactor Core bufferTimeout fair-backpressure pipeline permanently han…
-
CVE-2026-47862 2026-08-26ZipTransformer uses file_name header to build workDirectory path with…
-
CVE-2026-47860 2026-08-26Unbounded decompression of attacker-supplied compressed message bodies
-
CVE-2026-47859 2026-08-26Unbounded memory allocation in RFC6587SyslogDeserializer (octet-count…
-
CVE-2026-47857 2026-08-26Reactor Core windowTimeout fair-backpressure stream hang due to 20-bi…
-
CVE-2026-80158 2026-08-26Ansible-collection-community-general: community.general: ipa_getkeyta…
-
CVE-2026-77652 2026-08-26Dia: dia: heap buffer overflow in wpg colormap parser via out-of-boun…
-
CVE-2026-79902 2026-08-26Gimp: stack vla size underflow denial of service in seattle
-
CVE-2026-77658 2026-08-26Dia: dia: stack buffer overflow in bus object via unvalidated handle …
-
CVE-2026-79654 2026-08-26Ketello: katello content view history api cross-organization authoriz…
-
CVE-2026-80185 2026-08-25Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer l…
-
CVE-2026-80186 2026-08-25Bluez: stack overflow in name2utf8 causes dos and potential code execution
-
CVE-2026-78655 2026-08-25Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-fac…
-
CVE-2026-78619 2026-08-25Punk::Plugin::TOTP versions before 0.05 for Perl accept another accou…
-
CVE-2026-80101 2026-08-25Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated …
-
CVE-2026-9007 2026-07-15Reflected XSS in HCL Notes
-
CVE-2026-13014 2026-07-13Remote Code Execution vulnerability in "Suspicious" application
-
CVE-2026-6805 2026-05-07Vulnerability on Cryptobox external sharing feature
-
CVE-2026-6501 2026-05-04Improper restriction of XML external entity reference vulnerability i…
-
CVE-2026-6500 2026-05-04Plaintext storage of a password vulnerability in ILM Informatique Ope…
-
CVE-2026-6499 2026-05-04Incorrect Permission Assignment for Critical Resource vulnerability i…
-
CVE-2026-5794 2026-04-28Vulnerability in Cryptobox allows an authenticated user to trigger an…
-
CVE-2026-3457 2026-03-27Stored XSS vulnerability in Sentinel ACC
-
CVE-2026-0872 2026-02-13Improper Certificate Validation vulnerability in Thales SafeNet Agent…
-
CVE-2026-2344 2026-02-11Stored XSS on Plunet BusinessManager