CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23131 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12667 · Red Hat 19884 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Things
25 things, from 49,382 claims| Thing | Type | Platform | Date |
|---|---|---|---|
| SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CVE-2026-83548 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules | — | Linux,Unix | 2026-09-01 |
| SonicWall SMA1000 Appliances OS Command Injection Vulnerability CVE-2026-83549 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules | — | Linux,Unix | 2026-09-01 |
| PodcastGenerator 3.2.9 - Stored XSS CVE-2025-70336 · Exploit-DB | webapps | multiple | 2026-09-02 |
| SPIP Autosave Session Unauthenticated RCE · Metasploit exploit modules | — | Linux,Unix | 2026-08-30 |
| Marimo Remote Code Execution Vulnerability CVE-2026-39987 · CISA Known Exploited Vulnerabilities, Exploit-DB | webapps | multiple | 2026-04-23 |
| Langflow AI authenticated RCE CVE-2026-19295 · Metasploit exploit modules | — | Python | 2026-08-28 |
| IBM Langflow Code Injection Vulnerability CVE-2026-9198 · CISA Known Exploited Vulnerabilities, Exploit-DB, Metasploit exploit modules | webapps | Python / multiple | 2026-07-17 |
| Langflow AI Custom Component Authenticated RCE CVE-2026-18729 · Metasploit exploit modules | — | Python | 2026-08-28 |
| Ghost_CMS 6.19.0 - Remote Code Execution CVE-2026-29053 · Exploit-DB, Metasploit exploit modules | webapps | Linux,Unix,Windows / multiple | 2026-03-02 |
| PaperCut NG/MF Missing Authentication for Critical Function Vulnerability CVE-2026-81578 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules | — | Java,Linux,Unix,Windows | 2026-08-27 |
| PaperCut NG/MF Unsafe Reflection Vulnerability CVE-2026-82078 · CISA Known Exploited Vulnerabilities, NVD, Metasploit exploit modules | — | Java,Linux,Unix,Windows | 2026-08-27 |
| Bludit CMS 3.20.0 - Reflected Cross-Site Scripting CVE-2026-41456 · Exploit-DB | webapps | multiple | 2026-09-02 |
| Next.js Unauthenticated RCE on Windows Servers CVE-2026-75604 · Metasploit exploit modules | — | Windows | 2026-08-26 |
| Fullhan FH8626V100 - Multiple Vulnerabilities CVE-2026-51407 · Exploit-DB | hardware | multiple | 2026-09-02 |
| Fullhan FH8626V100 - Multiple Vulnerabilities CVE-2026-51406 · Exploit-DB | hardware | multiple | 2026-09-02 |
| Fullhan FH8626V100 - Multiple Vulnerabilities CVE-2026-51405 · Exploit-DB | hardware | multiple | 2026-09-02 |
| Fullhan FH8626V100 - Multiple Vulnerabilities CVE-2026-51404 · Exploit-DB | hardware | multiple | 2026-09-02 |
| Fullhan FH8626V100 - Multiple Vulnerabilities CVE-2026-51403 · Exploit-DB | hardware | multiple | 2026-09-02 |
| Fullhan FH8626V100 - Multiple Vulnerabilities CVE-2026-51402 · Exploit-DB | hardware | multiple | 2026-09-02 |
| SPIP X-Spip-Filtre Unauthenticated RCE CVE-2026-77647 · Metasploit exploit modules | — | Linux,Unix | 2026-08-20 |
| EVerest 2025.9.0 - DoS CVE-2025-68137 · Exploit-DB | dos | multiple | 2026-09-02 |
| Tenable Security Center Report Charting RCE CVE-2026-19626 · Metasploit exploit modules | — | Linux,Unix | 2026-08-13 |
| Wolf CMS 0.8.3.1 - RCE v CVE-2026-67206 · Exploit-DB | webapps | multiple | 2026-09-01 |
| Tenable Security Center SCAP Audit File Command Injection CVE-2026-19681 · Metasploit exploit modules | — | Linux,Unix | 2026-08-13 |
| Payload CMS 3.72.0 - Blind SQL Injection CVE-2026-25544 · Exploit-DB | webapps | multiple | 2026-09-01 |
Facets
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1731
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22689
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19161
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing5730
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10