CVE

What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.

Behind7 sourcesupdated 8h agofresh within 24h

66,157things

8,747named by two sources or more

1,072conflicts

7sources

Only one source knows: Exploit-DB 23133 · GitHub advisories 30 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12679 · Red Hat 19880 · Write-ups 5

Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.

Compared · what is held against what, and from which column of each source

Property	CISA Known Exploited Vulnerabilities	Red Hat	NVD	GitHub advisories	Metasploit exploit modules	Exploit-DB	Write-ups
Cvss	not said	`cvss3_score`	`cve.metrics.cvssMetricV31[].cvssData.baseScore`	`cvss.score`	not said	not said	not said
Exploited	`const:yes`	not said	not said	not said	not said	not said	not said
Severity	not said	`severity`	not said	`severity`	not said	not said	not said

Everything else the sources say is shown side by side, and not compared.

Try:mikrotik known_ransomware_campaign_use=Unknown CVE-2026-67279 kernel

EverythingExploited, and severe article 10 exploit 49396 vulnerability 49746

Things

25 things, from 99,152 claims

Thing	Kind	Severity	Cvss	Date
Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key that is insufficiently scoped to the source route. A single unauthenticated crafted request can poison that cache, causing cross-user content substitution or persistent denial of service until the poisoned entry is revalidated or replaced. This issue is fixed in versions 15.5.27 and 16.3.8. CVE-2026-94484 · NVD	vulnerability 1	—	—	2026-10-02
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows... CVE-2026-104403 · GitHub advisories, NVD	vulnerability 2	medium	5.3	2026-10-02
activestorage: Active Storage: Remote Code Execution via Unsafe libvips Operations CVE-2026-66066 · Red Hat, NVD, Metasploit exploit modules	vulnerability 2 exploit 1	high	8.9	2026-07-29
activestorage: Code injection in Active Storage when used in conjunction with the image_processing gem CVE-2025-24293 · Red Hat, Metasploit exploit modules	vulnerability 1 exploit 1	high	8.1	2026-01-30
ILIAS before versions 9.22, 10.10, and 11.3 contains an unauthenticated PHP object injection vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting serialized objects through the LTI authentication endpoint and triggering deserialization via the Shibboleth back-channel logout endpoint. Attackers can write arbitrary serialized objects into session storage, then exploit an available POP gadget through the logout endpoint's unrestricted deserialization to write attacker-controlled PHP content to a web-accessible path and achieve remote code execution as the web server user. CVE-2026-80428 · NVD, Exploit-DB	vulnerability 1 exploit 1	—	9.8	2026-08-26
Check Point Multiple Products Path Traversal Vulnerability CVE-2026-93616 · CISA Known Exploited Vulnerabilities, NVD	vulnerability 2	—	9.8	2026-09-22
httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite CVE-2026-56153 · Red Hat, NVD, GitHub advisories	vulnerability 3	high	7.5	2026-10-01
Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL passes the allow-list check. Applications without images.remotePatterns are not affected. Administrators unable to upgrade should audit allow-listed hosts and avoid entries whose DNS records are not trusted. This issue is fixed in version 16.3.8. CVE-2026-94483 · NVD	vulnerability 1	—	—	2026-10-02
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this... CVE-2026-59673 · GitHub advisories, NVD	vulnerability 2	medium	—	2026-10-02
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability CVE-2026-63077 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules	vulnerability 1 exploit 1	—	—	2026-07-27
Metabase 0.61.0 - Authenticated Remote Code Execution CVE-2026-59827 · Exploit-DB	exploit 1	—	—	2026-09-03
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CVE-2026-94127 · CISA Known Exploited Vulnerabilities, NVD	vulnerability 2	—	9.8	2026-09-22
httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html CVE-2026-56449 · Red Hat, NVD, GitHub advisories	vulnerability 3	high / low	3.7 / 7.5	2026-10-01
crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in Mistral model capability matching on Ruby 3.1.x CVE-2026-67989 · NVD	vulnerability 1	—	—	2026-10-02
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this... CVE-2026-59661 · GitHub advisories, NVD	vulnerability 2	medium	—	2026-10-02
Check Point SmartConsole Improper Authentication Vulnerability CVE-2026-16232 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules	vulnerability 1 exploit 1	—	—	2026-07-22
Sangoma FreePBX Authentication Bypass Vulnerability CVE-2025-57819 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB, Metasploit exploit modules	vulnerability 2 exploit 2	—	9.8	2025-08-28
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability CVE-2026-93952 · CISA Known Exploited Vulnerabilities, NVD	vulnerability 2	—	10	2026-09-22
httpd: httpd: Information disclosure via direct request to the WebDAV state directory CVE-2026-58415 · Red Hat, NVD, GitHub advisories	vulnerability 3	medium	5.3	2026-10-01
agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution. CVE-2026-51922 · NVD	vulnerability 1	—	—	2026-10-02
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this... CVE-2026-59664 · GitHub advisories, NVD	vulnerability 2	medium	—	2026-10-02
WordPress Core Interpretation Conflict Vulnerability CVE-2026-63030 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules	vulnerability 1 exploit 1	—	—	2026-07-17
WordPress Core SQL Injection Vulnerability CVE-2026-60137 · CISA Known Exploited Vulnerabilities, Metasploit exploit modules	vulnerability 1 exploit 1	—	—	2026-07-17
PodcastGenerator 3.2.9 - Stored XSS CVE-2025-70336 · Exploit-DB	exploit 1	—	—	2026-09-02
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CVE-2026-7273 · CISA Known Exploited Vulnerabilities, NVD	vulnerability 2	—	8.8	2026-06-16

Facets

Kind 99152 of 99152 claims

Source 99152 of 99152 claims

Severity 26286 of 99152 claims

Exploited 1731 of 99152 claims

Sources

CISA Known Exploited Vulnerabilities primary

The only source that says a vulnerability is being exploited right now.

Red Hat high

Its own severity, and the packages it tracks a vulnerability in.

NVD high

The CVSS baseline, and an anchor for CVEs the other members never reach.

GitHub advisories high

The ecosystem packages no distribution ships.

Metasploit exploit modules normal

Whether a module exists for the tool an attacker actually runs.

Exploit-DB normal

Whether working code exists at all, which is a different question from how severe it is.

Write-ups normal

The prose that explains a vulnerability after the advisories have stopped.