Free · official sources

Vulnerability intelligence, without the noise

Search CVEs by identifier, vendor, product and severity. See what is being exploited, what to fix first and where every fact comes from.

62.454

published CVEs

1.745

in CISA KEV

new in KEV (30 days)

777

critical (30 days)

now

last sync

Intelligence modules

Integrated tools over the same verified dataset.

FEATURED

Recently updated records from NVD, the CVE Program, CISA and GitHub.

High CVE-2026-9703 Viewer role can create, modify and delete Loki alerting rules 3m
Medium CVE-2026-79843 HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability 3m
Medium CVE-2026-79841 HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerability 3m
High CVE-2026-79840 HPE NonStop XABroker - Memory corruption vulnerability 3m
High CVE-2026-79839 HPE NonStop ODBC/MX Server - Memory corruption vulnerability 3m
High CVE-2026-79838 HPE NonStop ODBC/MX Services - Memory corruption vulnerability 3m
Medium CVE-2026-77460 EspoCRM: Mass email template renderer leaks restricted record fields 3m
Medium CVE-2026-63130 EspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and delete 3m

Search vulnerabilities by CVE, vendor, product, severity and remediation status.

Vulnerabilities with exploitation confirmed by CISA, newest first.

High CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability KEV 1d
Critical CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability KEV 1d
Critical CVE-2026-105134 Ahsay AhsayCBS Command Injection Vulnerability KEV 1d
High CVE-2026-105133 Ahsay AhsayCBS Improper Authentication Vulnerability KEV 1d
High CVE-2026-96951 Microsoft Windows Command Injection Vulnerability KEV 2d

Recently published critical CVSS. Severity is not urgency: check KEV and EPSS.

Critical CVE-2026-110957 Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection 51m
Critical CVE-2026-47168 EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params 54m
Critical CVE-2026-99999 ipv4: validate checksum_start before completing checksum 2h
Critical CVE-2026-109892 WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability 2h
Critical CVE-2026-109698 WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability 2h

Vendors with the most CISA KEV CVEs in this database.

Original technical analysis, reviewed by the team.

Video explanations of relevant vulnerabilities.

Automation with criteria — AI never decides on its own what is true.

1. Collection
Incremental sync with NVD, the CVE Program, CISA KEV, EPSS and GitHub; alerts only start an investigation.

2. Validation
Rules check official confirmation, CVSS origin, product evidence and conflicts between sources.

3. Publication
Only what passes the rules is published automatically; the rest goes to human review.

4. History
Every change (CVSS, KEV, versions, fixes) is recorded and visible on the record.