Every CVE, readable at a glance
CVEs in the spotlight
CVE-2026-109619
Exploited
RCE via stale global state
PHP Group PHP
9.2
Critical
CVE-2026-109618
Exploited
RCE via OOM corruption
PHP Group PHP
9.2
Critical
CVE-2026-99999
In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing…
Linux Linux
9.3
Critical
CVE-2025-48490
Laravel Rest Api is an API generator
Lomkit laravel-rest-api
6.6
Medium
CVE-2024-29401
xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted…
n/a n/a
9.8
Critical
CVE-2024-27834
Exploited
Apple Multiple Products Improper Authentication Vulnerability
Apple iOS and iPadOS · added 1 day ago
5.5
Medium
CVE-2026-119977
Exploited
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
WordPress Foundation WordPress · added 2 days ago
8.1
High
CVE-2026-118527
Exploited
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Ivanti Connect Secure · added 6 days ago
4.3
Medium
CVE-2026-111357
Exploited
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Ivanti Connect Secure · added 6 days ago
7.0
High
CVE-2026-76418
Exploited
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · added 1 week ago
8.6
High
Source: CISA Known Exploited Vulnerabilities.
For teams
Advanced features
Watchlist and alerts
Get notified as soon as a CVE is published for a product you care about.
SBOM and CI
Your CycloneDX components compared with every new CVE, automatically.
Remediation tracking
A kanban shared with your team, for simple and effective tracking.
AI assistant
Query CVEye straight from an AI, in plain language.