Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,302 published records · 16 KEV · 4,302 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,302 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3357.8%
High1,43733%
Med1,74641%
Low1323.1%
None20.05%
Legacy00.00%
Unscored65015%

Matching records by UTC month

Jan 264,302

Signal coverage

KEV-listed: 16
With a forecast: 4,302
Unknown date: 0
Unscored severity: 650

Share of cohort: KEV 0.37% · forecast 100% · unscored 15%.

Showing 141–160 of 4,302By severity band: Critical · 9.0–10.0 335, High · 7.0–8.9 1,437, Medium · 4.0–6.9 1,746, Low · 0.1–3.9 132, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 650

MedPublished 30 Jan 2026, 21:02 WIB

CVE-2026-1682

Free5GC SMF PFCP UDP Endpoint handler.go HandlePfcpAssociationReleaseRequest null pointer dereference

A flaw has been found in Free5GC SMF up to 4.1.0. Affected is the function HandlePfcpAssociationReleaseRequest of the file internal/pfcp/handler/handler.go of the component PFCP UDP Endpoint. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The exploit has been publish…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T14:02:07.468Z. Updated 2026-02-23T09:08:18.220Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Feb 2026, 16:08 WIB

Official record

MedPublished 30 Jan 2026, 20:42 WIB

CVE-2025-9226

Stored XSS

Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T13:42:21.337Z. Updated 2026-02-02T16:32:34.271Z.

Showing 141 to 160 of 4302.First page Next page

CVSS4.6v3.1KEVNot listedEPSSPresentUpdated02 Feb 2026, 23:32 WIB

Official record

HighPublished 30 Jan 2026, 20:02 WIB

CVE-2026-1498

WatchGuard Firebox LDAP Injection

An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP authentication server through an exposed authentication or management web interface. This vulnerability may also allow a remote attacker to authenticate as an LDA…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T13:02:59.561Z. Updated 2026-08-24T13:54:31.883Z.

CVSS7v4.0KEVNot listedEPSSPresentUpdated24 Aug 2026, 20:54 WIB

Official record

HighPublished 30 Jan 2026, 19:18 WIB

CVE-2025-13176

Local privilege escalation in ESET Inspect Connector for Windows

Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL.

Excerpt language: en.

Severity high: primary CNA CVSS 8.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T12:18:58.271Z. Updated 2026-02-02T16:32:58.431Z.

CVSS8.4v4.0KEVNot listedEPSSPresentUpdated02 Feb 2026, 23:32 WIB

Official record

CritPublished 30 Jan 2026, 18:05 WIB

CVE-2025-26385

Metasys product command injection vulnerability could allow remote SQL execution

Johnson Controls Metasys component listed below have Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability . Successful exploitation of this vulnerability could allow remote SQL execution This issue affects * Metasys: Application and Data Server (ADS) installed with SQL…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T11:05:16.688Z. Updated 2026-01-30T12:38:11.405Z.

CVSS9.5v4.0KEVNot listedEPSSPresentUpdated30 Jan 2026, 19:38 WIB

Official record

MedPublished 30 Jan 2026, 18:03 WIB

CVE-2026-22626

CVE-2026-22626

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T11:03:29.709Z. Updated 2026-02-27T14:37:37.094Z.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 21:37 WIB

Official record

MedPublished 30 Jan 2026, 18:03 WIB

CVE-2026-22625

CVE-2026-22625

Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitive system files.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T11:03:14.801Z. Updated 2026-02-27T14:42:08.422Z.

CVSS4.6v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 21:42 WIB

Official record

MedPublished 30 Jan 2026, 18:03 WIB

CVE-2026-22624

CVE-2026-22624

Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T11:03:02.811Z. Updated 2026-02-27T14:44:15.585Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 21:44 WIB

Official record

HighPublished 30 Jan 2026, 18:02 WIB

CVE-2026-22623

CVE-2026-22623

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T11:02:26.539Z. Updated 2026-02-27T14:45:19.674Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 21:45 WIB

Official record

HighPublished 30 Jan 2026, 18:01 WIB

CVE-2026-0709

CVE-2026-0709

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T11:01:55.633Z. Updated 2026-02-27T14:49:22.572Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 21:49 WIB

Official record

CritPublished 30 Jan 2026, 16:57 WIB

CVE-2026-1699

CVE-2026-1699

In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI environment with access to repository secrets an…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T09:57:14.877Z. Updated 2026-02-02T19:26:31.652Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated03 Feb 2026, 02:26 WIB

Official record

HighPublished 30 Jan 2026, 15:38 WIB

CVE-2026-21418

CVE-2026-21418

Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T08:38:59.870Z. Updated 2026-02-26T15:04:42.636Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 22:04 WIB

Official record

HighPublished 30 Jan 2026, 15:31 WIB

CVE-2025-1395

Sensitive Data Exposure in CoDeriApp's HeyGarson

Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping. This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted and it was learned that the product is not supported.

Excerpt language: en.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T08:31:53.477Z. Updated 2026-08-07T14:30:47.993Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated07 Aug 2026, 21:30 WIB

Official record

HighPublished 30 Jan 2026, 15:27 WIB

CVE-2026-22277

CVE-2026-22277

Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T08:27:02.070Z. Updated 2026-02-26T15:04:43.315Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 22:04 WIB

Official record

LowPublished 30 Jan 2026, 14:16 WIB

CVE-2026-25211

CVE-2026-25211

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

Excerpt language: en.

Severity low: primary CNA CVSS 3.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T07:16:14.350Z. Updated 2026-02-03T16:42:00.560Z.

CVSS3.2v3.1KEVNot listedEPSSPresentUpdated03 Feb 2026, 23:42 WIB

Official record

MedPublished 30 Jan 2026, 13:40 WIB

CVE-2026-25210

CVE-2026-25210

In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T06:40:27.917Z. Updated 2026-06-02T13:01:11.416Z.

CVSS6.9v3.1KEVNot listedEPSSPresentUpdated02 Jun 2026, 20:01 WIB

Official record

HighPublished 30 Jan 2026, 13:04 WIB

CVE-2026-0805

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller

An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.

Excerpt language: en.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T06:04:15.330Z. Updated 2026-02-02T16:33:11.255Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated02 Feb 2026, 23:33 WIB

Official record

CritPublished 30 Jan 2026, 13:04 WIB

CVE-2026-0963

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller

An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T06:04:05.503Z. Updated 2026-02-02T16:33:26.381Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated02 Feb 2026, 23:33 WIB

Official record

HighPublished 30 Jan 2026, 13:00 WIB

CVE-2026-1680

Local Privilege Escalation in Local Admin Service

Improper access control in the WCF endpoint in Edgemo (now owned by Danoffice IT) Local Admin Service 1.2.7.23180 on Windows allows a local user to escalate their privileges to local administrator via direct communication with the LocalAdminService.exe named pipe, bypassing client-side group membership restrictions.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T06:00:31.449Z. Updated 2026-02-02T16:33:39.478Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated02 Feb 2026, 23:33 WIB

Official record

MedPublished 30 Jan 2026, 12:34 WIB

CVE-2025-12899

net: icmp: Out of bound memory read

A flaw in Zephyr’s network stack allows an IPv4 packet containing ICMP type 128 to be misclassified as an ICMPv6 Echo Request. This results in an out-of-bounds memory read and creates a potential information-leak vulnerability in the networking subsystem.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T05:34:19.703Z. Updated 2026-10-13T19:56:39.159Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated14 Oct 2026, 02:56 WIB

Official record