Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,493CVE records
2,864Published, last 7 days
1,726In CISA KEV
1,450Critical, last 30 days
5,599Analysed
15:16 UTCLast NVD sync
Filters Show:
169,595 results. Medium severity.
Page 1 of 8,480| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-101041 | Medium | 6.3 | Not yet mapped | Improper input validation | — | — | — | Sep 27, 2026 |
| CVE-2026-101033 | Medium | 5.3 | Not yet mapped | Insecure direct object reference | — | — | — | Sep 27, 2026 |
| CVE-2026-100868 | Medium | 5.3 | Not yet mapped | CWE-1327 | — | — | — | Sep 27, 2026 |
| CVE-2026-100867 | Medium | 4.8 | Not yet mapped | CWE-150 | — | — | — | Sep 27, 2026 |
| CVE-2026-100866 | Medium | 4.8 | Not yet mapped | CWE-150 | — | — | — | Sep 27, 2026 |
| CVE-2026-97165 | Medium | 5.3 | Not yet mapped | Cross-site scripting | — | — | — | Sep 27, 2026 |
| CVE-2026-100749 | Medium | 5.1 | Not yet mapped | Cross-site request forgery | — | — | — | Sep 27, 2026 |
| CVE-2026-100748 | Medium | 6.9 | Not yet mapped | Cross-site request forgery | — | — | — | Sep 27, 2026 |
| CVE-2026-100747 | Medium | 5.1 | Not yet mapped | Cross-site request forgery | — | — | — | Sep 27, 2026 |
| CVE-2026-93304 | Medium | 6.3 | Not yet mapped | CWE-696 | — | — | — | Sep 27, 2026 |
| CVE-2026-89135 | Medium | 6.3 | Not yet mapped | Improper certificate validation | — | — | — | Sep 27, 2026 |
| CVE-2026-89134 | Medium | 6.3 | Not yet mapped | Improper certificate validation | — | — | — | Sep 27, 2026 |
| CVE-2026-89133 | Medium | 6.3 | Not yet mapped | Improper certificate validation | — | — | — | Sep 27, 2026 |
| CVE-2026-100746 | Medium | 5.5 | Not yet mapped | Improper authentication | — | — | — | Sep 27, 2026 |
| CVE-2026-100863 | Medium | 5.3 | Not yet mapped | Server-side request forgery (SSRF) | — | — | — | Sep 27, 2026 |
| CVE-2026-100862 | Medium | 6.9 | Not yet mapped | Cleartext storage of sensitive dat | — | — | — | Sep 27, 2026 |
| CVE-2026-100861 | Medium | 5.3 | Not yet mapped | Server-side request forgery (SSRF) | — | — | — | Sep 27, 2026 |
| CVE-2026-100860 | Medium | 6.8 | Not yet mapped | CWE-636 | — | — | — | Sep 27, 2026 |
| CVE-2026-100854 | Medium | 5.3 | Not yet mapped | Missing authorization | — | — | — | Sep 27, 2026 |
| CVE-2026-100850 | Medium | 4.8 | Not yet mapped | Server-side request forgery (SSRF) | — | — | — | Sep 27, 2026 |
