A clear view of public CVE records.

Search the official CVE List, read source records directly, and distinguish published, reserved, and rejected identifiers.

413,843 indexed CVE records · Last successful upstream refresh: 2026-10-24T03:24:06+00:00

Recently published

CVE-2026-115929 PUBLISHED
MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs
24 October 2026, 00:31 UTC
CVE-2026-115931 PUBLISHED
Arbitrary file read and backend crash through unrestricted provider method calls
23 October 2026, 22:02 UTC
CVE-2026-115938 PUBLISHED
Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE
23 October 2026, 21:58 UTC
CVE-2026-115937 PUBLISHED
Unauthenticated payment reuse allows unpaid orders to be marked as paid
23 October 2026, 21:50 UTC
CVE-2026-115801 PUBLISHED
Kakao khaiii JSON Config File Linear.cpp open out-of-bounds
23 October 2026, 21:45 UTC
CVE-2026-115935 PUBLISHED
Control panel only API response emulation replaces "securityKey" and reaches server RCE
23 October 2026, 21:40 UTC
CVE-2026-115897 PUBLISHED
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
23 October 2026, 21:37 UTC
CVE-2026-115895 PUBLISHED
Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution
23 October 2026, 21:32 UTC

Recently updated

CVE-2026-91475 PUBLISHED
No title supplied
20 October 2026, 21:26 UTC
CVE-2026-91474 PUBLISHED
No title supplied
20 October 2026, 21:26 UTC
CVE-2026-91473 PUBLISHED
No title supplied
20 October 2026, 21:26 UTC
CVE-2026-91471 PUBLISHED
No title supplied
20 October 2026, 21:26 UTC
CVE-2026-91467 PUBLISHED
No title supplied
20 October 2026, 21:26 UTC
CVE-2026-91466 PUBLISHED
No title supplied
20 October 2026, 21:26 UTC
CVE-2026-91465 PUBLISHED
No title supplied
20 October 2026, 21:26 UTC
CVE-2026-94422 PUBLISHED
xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
2 October 2026, 13:54 UTC