Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Minimum sightings per line
1
2
3
4
5
Loading…
Loading…
Loading…
Loading…
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
CVE Program structure
Structure on cve.orgThis diagram is rendered live from the CNA partner catalogue stored in our database, synchronized from cve.org via GCVE — not a static image.
-
42Gears ABB ADI AMI arcinfo Armis ASR ASRG ASUS azure-access B.Braun BAE Baxter BD BECDX BECLS BHV bosch Carrier CEP CODRA Cribl CTOne CyberDanube Cytiva Danfoss Deltaww Digi Dragos eclypsium Entrust Gallagher GE_Healthcare GE_Vernova Hackrate HemoCue Hitachi_Energy Hologic Honeywell hsi IDBS IDT-DNA jci JupiterOne LeicaBiosystems Leonardo LMS Medtronic MHV MIM MolDev Moxa MyMMT NetRise NIBEGroup OMICRON ONEKEY Pall Philips PTC Radiometer Roche Rockwell runZero SCIEX Secomea SEL siemens Simplinx SOCRadar SRA Stryker tlt_net TMUS TRO TXOne Vantive Verizon vx WindRiver wolfSSL XONA Xylem
-
CERTVDE CNA 0 CNAs
-
- 1 CNAs directly under CISA
-
376 CNAs directly under mitre
2N 9front @huntr_ai Absolute Acer Acronis adobe AHA airbus Airlock AlgoSec alibaba Almaviva Altera Altium AMD Ampere AMZN Anolis Antenna Anthropic apache AppCheck apple ARCON Arista Arm Arxscan ASUSTOR atlassian autodesk Automox avaya Axis AxxonSoft Baidu BCNY bcorg Bitdefender bizerba blackberry BlackDuck BLSOPS BombadilSystems brocade BT Bugcrowd ByteDance ca Caliptra Canon_EMEA canonical Canva Cato Censys Centreon CERT-In certcc Checkmarx Checkmk checkpoint Ciena cirosec cisco Citrix ClickHouse cloudflare Commvault ConcreteCMS ConnectWise CoolKit Crafter_CMS Crestron CrowdStrike CSA CSAI CSW CyberArk cygence Cynet dahua Dassault_Systemes debian Delinea dell DevCycle DEVOLUTIONS Dfinity DHIS2 directcyber Docker dotCMS Dremio drupal DSF DTEX DualVS EA Eaton Echo eclipse EDB EEF ELAN elastic ERIC Esri Everpure ExtremeNetworks F5 Fidelis flexera floragunn Fluid_Attacks forcepoint Forescout fortinet Fortra Foxit freebsd FSI FSOFT FTI FULL GEN Genetec Gitea GitHub_M GitHub_P GitLab GRAFANA GreenRocketSecurity GV hackerone Halborn Hanwha_Vision HashiCorp HCL HeroDevs HiddenLayer hikvision Hillstone Hitachi_Vantara Honor hp hpe huawei Huntress HYPR ibm ICT IDEMIA Illumio imaginationtech iManage INCD Insyde intel Intigriti IoT83 isc ivanti JAMF Jaspersoft jenkins JetBrains JFrog Joomla juniper Kaspersky KCFTech KeeperSecurity KNIME Kong KoreLogic krcert kubernetes larry_cashdollar lenovo Lexmark LGE libreswan Liferay linqi Linux Logitech M-Files Mattermost Mautic MediaTek Meta Microchip microsoft milestonesys Mirantis MON-CSIRT mongodb mozilla N-able naver NCSC.ch Neo4j netapp netflix NETGEAR NetScaler Netskope NI NLnet_Labs nodejs Nokia Nozomi Nutanix nvidia NX OAI OB obdev Octopus ODA odoo Okta Omnissa OnLogic OpenBMC openEuler openGauss OpenHarmony OpenNMS openssl OpenText OpenVPN Opera OPPO oracle OS-S OTRS OX Palantir palo_alto PangeaCyber PaperCut Patchstack Payara Pega Pentraze Perforce Phoenix php PingCAP PingIdentity PlexTrac postiz PRJBLK Profelis Profisee ProgressSoftware Proofpoint Proton PSF QCI qnap Qt qualcomm Qualys rami.io rapid7 RealPage Replicated Ribose RTI SailPoint Salesforce samsung.tv_appliance Samsung_Mobile sap Saviynt sba-research schneider SCHUTZWERK SDC Seagate seal SEC-VLab sec1 securepoint Securifera securin Semtech senhasegura ShopBeat SICK_AG Silabs Silver_Peak sirius SmileDigitalHealth SN Snow SNOW snyk Softing SoftIron SolarWinds Solidigm Sonatype sonicwall Sophos Spotfire Stackable STAR_Labs StrongDM Supermicro suse Swift symantec Synaptics Syncro synology Synopsys talos Tanium TCL_Smart_Terminal Tcpdump TeamViewer TECNOMobile Tego_Cyber Temporal tenable The_Missing_Link ThinkstAppliedResearch TianoCore tibco Tigera Toreon TPLink TR-CERT Trellix trendmicro tuxcare twcert TYPO3 Ubiquiti Unisoc Uniview upKeeper Vaadin Vestel Vivo vmware VulDB VulnCheck watchdog WatchGuard WDC_PSIRT wikimedia-foundation Wiz Wordfence WPScan WrenSecurity WSO2 XEN Xerox XI Xiaomi yandex Yugabyte Zabbix zdi zephyr Zohocorp Zoom Zowe Zscaler ZTE ZUSO_ART Zyxel
Latest vulnerabilities published by the CNAs operating under each root of the CVE Program.
-
CVE-2026-27875 2026-08-21Simplex Incident Manager Clear Test
-
CVE-2026-75933 2026-08-21Jet Admin Stored XSS
-
CVE-2026-75932 2026-08-21Jet Admin tenant isolation failure
-
CVE-2026-75928 2026-08-21Brushfire unauthenticated information disclosure
-
CVE-2026-49114 2026-08-21ONNX symlink-following and path-traversal arbitrary file write
-
CVE-2026-77646 2026-08-20Server Side Request Forgery (SSRF) vulnerability reported in Windchill
-
CVE-2026-77645 2026-08-20Critical Remote Code Execution (RCE) vulnerability reported in Windchill
-
CVE-2026-77644 2026-08-20Critical Bypass Access Control Vulnerability Reported for Windchill R…
-
CVE-2026-14953 2026-08-20Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is Missing Authoriz…
-
CVE-2026-14952 2026-08-20Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is offering files w…
-
CVE-2026-77812 2026-08-21Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
-
CVE-2026-77761 2026-08-21Cross-Document Parser State Contamination in misp-stix
-
CVE-2026-77755 2026-08-21Denial of Service in MISP-STIX Import via Malformed or Oversized STIX…
-
CVE-2026-77751 2026-08-21Path Traversal in MISP Object Template Resolution During STIX Import …
-
CVE-2026-77710 2026-08-21STIX2 Parser Confusion and Mass Assignment Allow Unauthorized MISP At…
-
CVE-2026-70383 2026-08-20Arbitrary file overwrite vulnerability in DigiDoc4 client
-
CVE-2026-64972 2026-08-20Reflected XSS in ATutor
-
CVE-2026-64971 2026-08-20Reflected XSS in ATutor
-
CVE-2026-64970 2026-08-20Stored XSS in ATutor
-
CVE-2026-64969 2026-08-20Insecure Direct Object Reference in ATutor
-
CVE-2026-12710 2026-08-22Missing Authorization in Application Integration QueryEngineTask
-
CVE-2026-76023 2026-08-20Improper resource control in Linux Toolkit Theming in Google Chrome p…
-
CVE-2026-76022 2026-08-20Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 a…
-
CVE-2026-76021 2026-08-20Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowe…
-
CVE-2026-76020 2026-08-20Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed…
-
CVE-2026-76019 2026-08-20Incorrect authorization in Workers in Google Chrome prior to 151.0.79…
-
CVE-2026-76018 2026-08-20Privilege elevation in Import in Google Chrome prior to 151.0.7922.17…
-
CVE-2026-76017 2026-08-20Use after free in Chromoting in Google Chrome prior to 151.0.7922.173…
-
CVE-2026-76045 2026-08-18Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allo…
-
CVE-2026-76038 2026-08-18Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed…
-
CVE-2026-27875 2026-08-21Simplex Incident Manager Clear Test
-
CVE-2026-77646 2026-08-20Server Side Request Forgery (SSRF) vulnerability reported in Windchill
-
CVE-2026-77645 2026-08-20Critical Remote Code Execution (RCE) vulnerability reported in Windchill
-
CVE-2026-77644 2026-08-20Critical Bypass Access Control Vulnerability Reported for Windchill R…
-
CVE-2026-14953 2026-08-20Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is Missing Authoriz…
-
CVE-2026-14952 2026-08-20Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is offering files w…
-
CVE-2026-14951 2026-08-20Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Cr…
-
CVE-2026-14950 2026-08-20Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to In…
-
CVE-2026-14949 2026-08-20Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to In…
-
CVE-2026-14948 2026-08-20Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to In…
-
CVE-2026-77780 2026-08-21Unvalidated bank account and card foreign keys in the Prospero Flow C…
-
CVE-2026-77759 2026-08-21IDOR and missing authorization in the Prospero Flow CRM transaction A…
-
CVE-2026-76203 2026-08-19CSS sanitizer bypass in Pentestify report themes allows forced outbou…
-
CVE-2026-75872 2026-08-18HTML Injection in MailerUp double opt-in verification email
-
CVE-2026-19871 2026-08-14Use of hard-coded credentials in Prospero Flow CRM employee onboarding
-
CVE-2026-19870 2026-08-14IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and …
-
CVE-2026-19744 2026-08-13Stored Cross-site Scripting in Pentestify Markdown renderer via unesc…
-
CVE-2026-19734 2026-08-13IDOR in Prospero Flow CRM allows cross-tenant product disclosure and …
-
CVE-2026-19716 2026-08-13Stored Cross-site Scripting in Pentestify user account deletion via u…
-
CVE-2026-19539 2026-08-11IDOR in Prospero Flow CRM allows cross-tenant ticket read, hijacking,…
-
CVE-2026-73537 2026-08-21Cross-site scripting vulnerability exists in Miraikan Assist App. If …
-
CVE-2026-76137 2026-08-21Missing authentication for critical function vulnerability exists in …
-
CVE-2026-76131 2026-08-21Use of hard-coded credentials issue exists in VOCALOID6 , which may a…
-
CVE-2026-71368 2026-08-20F-RevoCRM contains a cross-site scripting vulnerability. If a user vi…
-
CVE-2026-73542 2026-08-20Multiple SEIKO EPSON printers and scanners contain revoked root certi…
-
CVE-2026-70408 2026-08-19An incorrect authorization vulnerability exists in acmailer, which ma…
-
CVE-2026-66358 2026-08-19A cross-site scripting vulnerability exists in acmailer, which may al…
-
CVE-2026-11751 2026-08-19A vulnerability has been identified in armeria-xds versions prior to …
-
CVE-2026-72506 2026-08-13VoiceTra provided by National Institute of Information and Communicat…
-
CVE-2026-66411 2026-08-10DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authenticati…
-
CVE-2026-78183 2026-08-23DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quo…
-
CVE-2026-78140 2026-08-23Dromara UJCMS web-file-template Endpoint WebFileTemplateController.ja…
-
CVE-2026-19565 2026-08-23Apache::AppSamurai::Util versions through 1.01 for Perl generate pred…
-
CVE-2026-75922 2026-08-23Reverse::Proxy versions before 0.04 for Perl allow HTTP request smugg…
-
CVE-2026-9769 2026-08-23justhtml before 1.10.0 Denial of Service via deeply nested HTML
-
CVE-2026-8630 2026-08-23justhtml before 1.12.0 Mutation XSS via Raw Text Elements
-
CVE-2026-8445 2026-08-23justhtml before 1.12.0 Sanitizer Bypass via Markdown
-
CVE-2026-7808 2026-08-23justhtml before 1.16.0 Multiple Security Issues via Sanitization
-
CVE-2026-77088 2026-08-23justhtml 0.9.0 through 1.21.0 Cross-Site Scripting via code-span
-
CVE-2026-74793 2026-08-23justhtml before 3.11.0 XSS via selectedcontent projection
-
CVE-2026-78183 2026-08-23DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quo…
-
CVE-2026-19565 2026-08-23Apache::AppSamurai::Util versions through 1.01 for Perl generate pred…
-
CVE-2026-75922 2026-08-23Reverse::Proxy versions before 0.04 for Perl allow HTTP request smugg…
-
CVE-2026-75866 2026-08-22Punk::OAuth2::Server versions through 0.03 for Perl issue access toke…
-
CVE-2026-75870 2026-08-22Punk versions before 0.18 for Perl allow session cookie forgery via a…
-
CVE-2026-77781 2026-08-21Tie::Hash::Regex versions before 2.0.0 for Perl will throw an excepti…
-
CVE-2026-74866 2026-08-21@fastify/busboy vulnerable to CRLF injection via multipart Content-Di…
-
CVE-2026-73267 2026-08-21Clusterclaims-controller: clusterclaims-controller: managedcluster de…
-
CVE-2026-73137 2026-08-20Multicloud-operators-subscription: multicloud-operators-subscription:…
-
CVE-2026-67567 2026-08-20Multicloud-operators-subscription: multicloud-operators-subscription:…
-
CVE-2026-9007 2026-07-15Reflected XSS in HCL Notes
-
CVE-2026-13014 2026-07-13Remote Code Execution vulnerability in "Suspicious" application
-
CVE-2026-6805 2026-05-07Vulnerability on Cryptobox external sharing feature
-
CVE-2026-6501 2026-05-04Improper restriction of XML external entity reference vulnerability i…
-
CVE-2026-6500 2026-05-04Plaintext storage of a password vulnerability in ILM Informatique Ope…
-
CVE-2026-6499 2026-05-04Incorrect Permission Assignment for Critical Resource vulnerability i…
-
CVE-2026-5794 2026-04-28Vulnerability in Cryptobox allows an authenticated user to trigger an…
-
CVE-2026-3457 2026-03-27Stored XSS vulnerability in Sentinel ACC
-
CVE-2026-0872 2026-02-13Improper Certificate Validation vulnerability in Thales SafeNet Agent…
-
CVE-2026-2344 2026-02-11Stored XSS on Plunet BusinessManager