Vulnerability Database
12-Month Intensity
Security bulletin trends by severity
CVSSv4 Base Score Distribution
Vulnerabilities by severity score for the past 7 days
Attack Vector
Breakdown by attack vectors for the past 7 days
Latest Vulnerability Database Updates
Security Bulletins
SB2026110578
High
Improper access control in REST & JSON API Authentication for Drupal module
Patched
2h ago
SB2026110577
Medium
Improper access control in Workflow Notifications module for Drupal
Patched
2h ago
SB2026110576
Medium
Remote code execution in certain Zyxel APs, FWA7, and security routers
Patched
2h ago
SB2026110575
Low
Improper access control in Simple OAuth (OAuth2) & OpenID Connect module for Drupal
Patched
2h ago
SB2026110574
Critical
Remote code execution in Zyxel GS1900 series switches
Patched Exploited
2h ago
SB2026110573
Medium
Improper access control in S3 File System CORS Upload module for Drupal
Patched
3h ago
Zero-Days
#VU158769
Generation of Predictable Numbers or Identifiers in Ivanti Connect Secure (formerly Pulse Connect Secure)
CVE-2026-118527
2d ago
#VU158768
Missing Authentication for Critical Function in Ivanti Connect Secure (formerly Pulse Connect Secure)
CVE-2026-111357
2d ago
#VU158351
Unchecked Return Value to NULL Pointer Dereference in Cisco Secure Firewall Adaptive Security Appliance (ASA)
CVE-2026-76418
1w ago
Exploits
#VU154150
CVE-2026-97229
Metasploit
Exploit for Integer overflow in GitLab Enterprise Edition and Gitlab Community Edition
GitLab Enterprise Edition
5d ago
#VU149715
CVE-2026-76443
Metasploit
Exploit for Improper Neutralization in Cisco Secure Email and Web Manager and Secure Email Gateway
Cisco Secure Email and Web Manager
1w ago
#VU152293
CVE-2026-88773
Metasploit
Exploit for Inconsistent interpretation of HTTP requests in Citrix Netscaler ADC and Citrix NetScaler Gateway
Citrix Netscaler ADC
1w ago