CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,199 CVEs published, 234 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,199
Show in the list
Critical, last 7 days
234
Show in the list
Healthcare-tagged, last 7 days
9
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list
1,762 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-114625
Known exploited
Critical 9.9Security Advisory 0199
Assigned by Arista
Oct 22, 2026
CVE-2026-111497
Known exploited
Critical 9.2Out-of-Bounds Write in Google Brotli Decoder
Assigned by Google
Oct 22, 2026
CVE-2026-109619
Known exploited
Critical 9.2RCE via stale global state
Assigned by php
Oct 21, 2026
CVE-2026-109618
Known exploited
Critical 9.2RCE via OOM corruption
Assigned by php
Oct 21, 2026
CVE-2026-102764
Known exploited
Critical 9.3Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
Assigned by BT
Oct 15, 2026
CVE-2026-110936
Known exploited
Medium 6.7A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8).
Assigned by siemens
Oct 15, 2026
CVE-2026-0322
Known exploited
High 8.6PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
Assigned by palo_alto
Oct 14, 2026
CVE-2026-76519
Known exploited
Critical 9.8Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Assigned by cisco
Oct 14, 2026
CVE-2026-106931
Known exploited
High 8.5SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected…
Assigned by jpcert
Oct 14, 2026
CVE-2026-110447
Known exploited
Critical 9.2Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerabi…
Assigned by mitre
Oct 13, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.