All Vulnerabilities 2026

Every CVE published since 1 January, with exploitation status, CISA KEV and EPSS. Updated daily.

Total CVEs–published this year

Critical–CVSS 9.0 – 10

High–CVSS 7.0 – 8.9

Actively exploited–in CISA KEV

Public PoC–exploit code published

CVEs published per month · select a bar to filter by month

Loading vulnerability data…

		Description	Vendor	Product		Exploitation

Where this data comes from: CVE details and severity from the NVD; vendor and product from the official CVE.org record; exploited vulnerabilities from the CISA KEV catalog; exploit likelihood from FIRST EPSS. Refreshed every day.
Exploitation: Active exploitation: listed in CISA KEV. PoC available: NVD links to public exploit or proof-of-concept code. No public exploitation reported: neither of the above, which does not mean it can't be exploited.
EPSS: The estimated probability that the vulnerability will be exploited in the next 30 days.
Severity: CVSS base score (v4.0 where available, otherwise v3.x). "Not yet scored" means NVD or the reporting organisation hasn't published a score yet.