CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

5 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-22172	9.9	critical	openclaw / openclaw	OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path t	169d ago
CVE-2026-53838	9.8	critical	openclaw / openclaw	OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired	85d ago
CVE-2026-32038	9.8	critical	openclaw / openclaw	OpenClaw before 2026.2.24 contains a sandbox network isolation bypass vulnerability that allows trusted operators	170d ago
CVE-2026-30741	9.8	critical	openclaw / openclaw	A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbit	178d ago
CVE-2026-32913	9.3	critical	openclaw / openclaw	OpenClaw before 2026.3.7 contains an improper header validation vulnerability in fetchWithSsrFGuard that forwards	166d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker