CVE Tracker
5 recordsEvery published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 8 added to KEV in the last 7 days.
VendorAllmicrosoft 85mozilla 43google 37openclaw 30linux 24ibm 19dlink 19wwbn 19mattermost 18samsung 17tenda 16adobe 16canva 15gvectors 14jettweb 13f5 13parseplatform 11raytha 11arubanetworks 10hcltech 10lenovo 9gl-inet 9redhat 9nextclickventures 9
| CVE | CVSS | EPSS | KEV sources | Patch window | Vendor / product | Summary | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-3579 | 5.9 | — | — | — | wolfssl / wolfssl | wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication | 216d ago |
| CVE-2026-3229 | 5.5 | — | — | — | wolfssl / wolfssl | An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption | 216d ago |
| CVE-2026-1005 | 5.3 | — | — | — | wolfssl / wolfssl | Integer underflow in wolfSSL packet sniffer <= 5.8.4 allows an attacker to cause a buffer overflow in the AEAD decr | 217d ago |
| CVE-2026-3503 | 5.2 | — | — | — | wolfssl / wolfssl | Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex | 217d ago |
| CVE-2026-3580 | 4.7 | — | — | — | wolfssl / wolfssl | In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bne | 216d ago |
Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.