Total CVEs
2741
last 14 days
Avg Priority
33.1
of max 220
KEV
3
actively exploited
POC
355
public exploits
Unpatched
714
CRIT/HIGH without patch
How is Priority Score calculated?
Priority Score is a composite risk metric (0-220) combining multiple real-world threat signals:
KEV +50
CISA Known Exploited Vulnerability — confirmed active exploitation in the wild
EPSS x100
Exploit Prediction Scoring System — probability of exploitation in next 30 days (0-100)
CVSS x5
Common Vulnerability Scoring System — technical severity (0-50)
POC +20
Public exploit code exists — lowers barrier for attackers
0-40 Low
40-80 Medium
80-120 High
120+ Critical
Patch Now — Known Exploited Vulnerabilities
124
CVE-2026-35616
A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an
119
CVE-2026-5281
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had co
109
CVE-2026-3502
TrueConf Client downloads application update code and applies it without performing verification. An
Priority Distribution
| Priority | CVE |
|---|---|
| 124 |
CVE-2026-35616
A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through
|
| 119 |
CVE-2026-5281
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote
|
| 109 |
CVE-2026-3502
TrueConf Client downloads application update code and applies it without perform
|
| 69 |
CVE-2026-2699
Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthentica
|
| 69 |
CVE-2026-34935
### Summary
The `--mcp` CLI argument is passed directly to `shlex.split()` and
|
| 67 |
CVE-2026-23696
Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vul
|
| 67 |
CVE-2026-33579
OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /
|
| 67 |
CVE-2026-29014
MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injec
|
| 67 |
CVE-2026-30562
A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sa
|
| 66 |
CVE-2026-35022
Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection v
|
| 66 |
CVE-2026-22679
Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthentica
|
| 66 |
CVE-2026-2701
Authenticated user can upload a malicious file to the server and execute it, whi
|
| 66 |
CVE-2026-39912
V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication token
|
| 65 |
CVE-2026-5994
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Th
|
| 65 |
CVE-2026-6113
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191
|
| 65 |
CVE-2026-6025
A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This af
|
| 65 |
CVE-2026-5996
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191
|
| 65 |
CVE-2026-5851
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Th
|
| 65 |
CVE-2026-6115
A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the
|
| 65 |
CVE-2026-5853
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191
|
| 65 |
CVE-2026-6112
A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affecte
|
| 65 |
CVE-2026-5995
A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacte
|
| 65 |
CVE-2026-6029
A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affec
|
| 65 |
CVE-2026-5997
A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The impac
|
| 65 |
CVE-2026-6114
A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected
|
| 65 |
CVE-2026-6026
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Th
|
| 65 |
CVE-2026-5850
A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This af
|
| 65 |
CVE-2026-6027
A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This is
|
| 65 |
CVE-2026-6028
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191
|
| 65 |
CVE-2026-5852
A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affecte
|
| 65 |
CVE-2026-6116
A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This vu
|
| 65 |
CVE-2026-5993
A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vu
|
| 65 |
CVE-2026-5854
A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected
|
| 64 |
CVE-2026-5976
A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Th
|
| 64 |
CVE-2026-5975
A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The imp
|
| 64 |
CVE-2026-5977
A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This im
|
| 64 |
CVE-2026-5978
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191
|
| 64 |
CVE-2026-22683
Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnera
|
| 63 |
CVE-2026-5684
A vulnerability was determined in Tenda CX12L 16.03.53.12. Affected by this issu
|
| 63 |
CVE-2026-35020
Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection v
|
| 63 |
CVE-2026-29002
CouchCMS contains a privilege escalation vulnerability that allows authenticated
|
| 63 |
CVE-2026-22666
Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code e
|
| 62 |
CVE-2026-35021
Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection v
|
| 61 |
CVE-2026-4896
The WCFM - Frontend Manager for WooCommerce along with Bookings Subscription Lis
|
| 58 |
CVE-2026-30573
A Business Logic vulnerability exists in SourceCodester Pharmacy Product Managem
|
| 58 |
CVE-2026-4338
The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to
|
| 57 |
CVE-2026-6123
A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromA
|
| 57 |
CVE-2026-5212
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, D
|
| 57 |
CVE-2026-5156
A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function
|
| 57 |
CVE-2026-5609
A flaw has been found in Tenda i12 1.0.0.11(3862). Affected by this vulnerabilit
|
| 57 |
CVE-2026-5204
A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function f
|
| 57 |
CVE-2026-6121
A flaw has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is t
|
| 57 |
CVE-2026-5604
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element
|
| 57 |
CVE-2026-6122
A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is
|
| 57 |
CVE-2026-6015
A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the functio
|
| 57 |
CVE-2026-5567
A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the funct
|
| 57 |
CVE-2026-5152
A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function for
|
| 57 |
CVE-2026-5154
A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element
|
| 57 |
CVE-2026-6120
A vulnerability was detected in Tenda F451 1.0.0.7. Affected is the function fro
|
| 57 |
CVE-2026-5830
A vulnerability was identified in Tenda AC15 15.03.05.18. This affects the funct
|
| 57 |
CVE-2026-6016
A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the
|
| 57 |
CVE-2026-6124
A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects
|
| 57 |
CVE-2026-5213
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, D
|
| 57 |
CVE-2026-5211
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L,
|
| 57 |
CVE-2026-6013
A vulnerability was detected in D-Link DIR-513 1.10. This vulnerability affects
|
| 57 |
CVE-2026-6012
A security vulnerability has been detected in D-Link DIR-513 1.10. This affects
|
| 57 |
CVE-2026-5214
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-32
|
| 57 |
CVE-2026-6014
A flaw has been found in D-Link DIR-513 1.10. This issue affects the function fo
|
| 57 |
CVE-2026-5349
A vulnerability was identified in Trendnet TEW-657BRM 1.00.1. The affected eleme
|
| 57 |
CVE-2026-5608
A vulnerability was detected in Belkin F9K1122 1.00.33. Affected is the function
|
| 57 |
CVE-2026-5610
A vulnerability has been found in Belkin F9K1015 1.00.10. Affected by this issue
|
| 57 |
CVE-2026-5566
A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This
|
| 57 |
CVE-2026-5614
A security flaw has been discovered in Belkin F9K1015 1.00.10. Impacted is the f
|
| 57 |
CVE-2026-5611
A vulnerability was found in Belkin F9K1015 1.00.10. This affects the function f
|
| 57 |
CVE-2026-5628
A security vulnerability has been detected in Belkin F9K1015 1.00.10. Impacted i
|
| 57 |
CVE-2026-5544
A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-18053
|
| 57 |
CVE-2026-5613
A vulnerability was identified in Belkin F9K1015 1.00.10. This issue affects the
|
| 57 |
CVE-2026-5350
A security flaw has been discovered in Trendnet TEW-657BRM 1.00.1. The impacted
|
| 57 |
CVE-2026-5612
A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability aff
|
| 57 |
CVE-2026-5605
A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function
|
| 57 |
CVE-2026-5155
A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromA
|
| 57 |
CVE-2026-5979
A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulner
|
| 57 |
CVE-2026-5981
A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the func
|
| 57 |
CVE-2026-5982
A vulnerability was found in D-Link DIR-605L 2.13B01. This vulnerability affects
|
| 57 |
CVE-2026-5989
A flaw has been found in Tenda F451 1.0.0.7. Affected is the function fromRouteS
|
| 57 |
CVE-2026-5815
A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03. Impacted is the f
|
| 57 |
CVE-2026-5685
A vulnerability was identified in Tenda CX12L 16.03.53.12. This affects the func
|
| 57 |
CVE-2026-5176
A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. A
|
| 57 |
CVE-2026-5844
A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sp
|
| 57 |
CVE-2026-1579
The MAVLink communication protocol does not require cryptographic
authenticatio
|
Oldest Unpatched Critical/High CVEs
| CVE | Severity | CVSS | Priority | Days Open |
|---|---|---|---|---|
| CVE-2024-3400 | CRITICAL | 10.0 | 224 | 730d |
| CVE-2019-19781 | CRITICAL | 9.8 | 223 | 2298d |
| CVE-2020-5902 | CRITICAL | 9.8 | 223 | 2110d |
| CVE-2021-35464 | CRITICAL | 9.8 | 223 | 1724d |
| CVE-2020-10189 | CRITICAL | 9.8 | 223 | 2227d |
| CVE-2012-4681 | CRITICAL | 9.8 | 223 | 4975d |
| CVE-2022-42475 | CRITICAL | 9.8 | 223 | 1196d |
| CVE-2023-3519 | CRITICAL | 9.8 | 223 | 997d |
| CVE-2015-7450 | CRITICAL | 9.8 | 222 | 3752d |
| CVE-2023-34048 | CRITICAL | 9.8 | 222 | 899d |
1 / 31
Next