🔎 Look up a CVE
NVD details, CVSS, mitigations, and an AI summary — up to 10 free lookups/day.
Turn CVE findings into context-aware risk decisions
CVE Risk Analyzer transforms raw vulnerability scans into a context-adjusted, auditable
score-of-record: AI-assisted mitigation surveys, a deterministic risk engine, and live CVE
enrichment from NVD — without infrastructure identifiers ever leaving your boundary.
SOC-aware workflow · No infrastructure identifiers sent to the AI provider · Every score change audited
🛰️ Latest critical CVEs
CVSS ≥ 9.0, newest first
CVE-2026-105812
CVSS 9.0
Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow…
CVE-2026-82901
CVSS 9.8
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in…
CVE-2026-85984
CVSS 9.8
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mo_wp_login…
CVE-2026-94084
CVSS 9.4
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with…
CVE-2026-94083
CVSS 9.4
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even th…
CVE-2026-93958
CVSS 9.1
A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component…
What you get
🧭
AI-assisted mitigation surveys
Per-finding questions that adjust the score to the controls actually in place.
⚖️
Deterministic score-of-record
A reproducible risk number the model can advise on but never silently move.
📡
Live CVE enrichment from NVD
Authoritative CVSS, CWE, and descriptions fetched once and reused across assets.
📋
Audit-ready reporting
Every override carries who, when, and why — exported alongside the score.