CVE Vulnerability Database
Search and browse 425,147 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-53972 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-53971 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-49118 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-49117 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-45241 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-45240 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-45239 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-45238 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-45237 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-45236 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-45235 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-45234 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-100502 | MEDIUM | 5 | 0.3% | Sep 25, 2026 | Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attacker... |
| CVE-2026-100501 | MEDIUM | 6.5 | 0.3% | Sep 25, 2026 | Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api... |
| CVE-2026-100419 | HIGH | 7 | 0.1% | Sep 25, 2026 | gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that al... |
| CVE-2026-100418 | MEDIUM | 5.3 | 0.3% | Sep 25, 2026 | Flame through 2.4.0 contains an information exposure vulnerability in the unauthenticated GET /api/config endpoint that ... |
| CVE-2026-100383 | MEDIUM | 4.8 | — | Sep 25, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F... |
| CVE-2026-100382 | CRITICAL | 10 | — | Sep 25, 2026 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Fo... |
| CVE-2026-100381 | MEDIUM | 5.3 | — | Sep 25, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F... |
| CVE-2026-9313 | — | — | — | Sep 25, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-96879 | MEDIUM | 6.9 | 0.3% | Sep 25, 2026 | Improper removal of sensitive information before storage or transfer vulnerability in Wikimedia Foundation's Mediawiki -... |
| CVE-2026-91769 | MEDIUM | 4.3 | 0.1% | Sep 25, 2026 | PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matc... |
| CVE-2026-91767 | MEDIUM | 6.5 | 0.1% | Sep 25, 2026 | php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS... |
| CVE-2026-91766 | MEDIUM | 5.9 | 0.3% | Sep 25, 2026 | When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authori... |
| CVE-2026-91765 | HIGH | 7.5 | 0.5% | Sep 25, 2026 | cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated at... |