Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 14,934 published records · 32 KEV · 14,934 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

14,934 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2258.2%
High5,37436%
Med4,26529%
Low4232.8%
None20.01%
Legacy00.00%
Unscored3,64524%

Matching records by UTC month

Sep 2614,934

Signal coverage

KEV-listed: 32
With a forecast: 14,934
Unknown date: 0
Unscored severity: 3,645

Share of cohort: KEV 0.21% · forecast 100% · unscored 24%.

Showing 141–160 of 14,934By severity band: Critical · 9.0–10.0 1,225, High · 7.0–8.9 5,374, Medium · 4.0–6.9 4,265, Low · 0.1–3.9 423, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 3,645

HighPublished 30 Sep 2026, 23:25 WIB

CVE-2026-55177

CloudTAK: Authenticated full-read SSRF in /api/esri* routes — user-controlled URL fetched with no IP-classification guard

CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to version 13.10.0, every route in the ESRI helper family (api/routes/esri.ts) takes a fully attacker-controlled URL from the request (POST /api/esri body url, and the portal / server / layer query parameters …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T16:25:02.258Z. Updated 2026-09-30T19:34:04.594Z.

CVSS7.6v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 02:34 WIB

Official record

LowPublished 30 Sep 2026, 23:23 WIB

CVE-2026-103444

Stored XSS through system messages in WikiForum

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki WikiForum extension allows Stored XSS. This issue affects MediaWiki WikiForum extension: master.

Excerpt language: en.

Severity low: primary CNA CVSS 1.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 141 to 160 of 14934.First page Next page

Published 2026-09-30T16:23:56.008Z. Updated 2026-09-30T20:01:02.627Z.

CVSS1.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 03:01 WIB

Official record

CritKEVPublished 30 Sep 2026, 23:21 WIB

CVE-2026-102490

Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package

Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service processes began running as root and executed files that were owned and writable by the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.

Published 2026-09-30T16:21:20.601Z. Updated 2026-10-08T19:55:53.033Z.

CVSS9.4v4.0KEVListedEPSSPresentUpdated09 Oct 2026, 02:55 WIB

Official record

CritKEVPublished 30 Sep 2026, 23:21 WIB

CVE-2026-102489

Undisclosed RCE in Zammad v6.3 and higher

Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the underlying framework.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.

Published 2026-09-30T16:21:19.937Z. Updated 2026-10-19T09:10:59.656Z.

CVSS9.4v4.0KEVListedEPSSPresentUpdated19 Oct 2026, 16:10 WIB

Official record

LowPublished 30 Sep 2026, 23:19 WIB

CVE-2026-103443

API permits session-seeded javascript URL XSS

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia Foundation MediaWiki Collection (Book) extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collection (Book) extension: 1.46, 1.45, and 1.43.

Excerpt language: en.

Severity low: primary CNA CVSS 1.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T16:19:16.720Z. Updated 2026-09-30T20:01:02.840Z.

CVSS1.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 03:01 WIB

Official record

HighPublished 30 Sep 2026, 23:17 WIB

CVE-2026-19553

SSLContext.wrap_bio() missing validation of server_hostname parameter

ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set. Due to a missing parameter check in SSLObject, if the server_hostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to programs where ce…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T16:17:39.368Z. Updated 2026-10-16T18:33:12.475Z.

CVSS7.6v4.0KEVNot listedEPSSPresentUpdated17 Oct 2026, 01:33 WIB

Official record

CritPublished 30 Sep 2026, 23:16 WIB

CVE-2026-19445

Use-after-free of a server-side SSLContext when sni_callback switches contexts

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and nothing else keeps the original ssl.SSLContext alive. Typical cases are servers that create a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T16:16:04.923Z. Updated 2026-10-03T00:36:46.398Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated03 Oct 2026, 07:36 WIB

Official record

MedPublished 30 Sep 2026, 23:15 WIB

CVE-2026-103232

AdithyaYelloju Restaurant-Management-System table_booking.php mysqli_query sql injection

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin/table_booking.php. This manipulation of the argument Name causes sql injection. Remote exploitation of the attack is possible. The exploi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T16:15:11.364Z. Updated 2026-09-30T17:04:12.956Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 00:04 WIB

Official record

HighPublished 30 Sep 2026, 23:09 WIB

CVE-2026-103442

MergeAccount PHP object injection via session-key substitution

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T16:09:40.369Z. Updated 2026-09-30T16:09:40.369Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 23:09 WIB

Official record

MedPublished 30 Sep 2026, 23:00 WIB

CVE-2026-103231

AdithyaYelloju Restaurant-Management-System Order Cancellation cancel.php mysqli_query sql injection

A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqli_query of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID leads to sql injection. The attack may be i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T16:00:11.743Z. Updated 2026-10-02T16:21:41.204Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated02 Oct 2026, 23:21 WIB

Official record

HighPublished 30 Sep 2026, 22:59 WIB

CVE-2026-103441

Unauthenticated arbitrary file deletion through Wikibase serialized entity parsing

Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. This issue affects MediaWiki Wikibase extension: 1.46, 1.45, and 1.43.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:59:42.361Z. Updated 2026-09-30T15:59:42.361Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 22:59 WIB

Official record

MedPublished 30 Sep 2026, 22:54 WIB

CVE-2026-47539

CVE-2026-47539

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an incorrect numeric conversion. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:54:59.603Z. Updated 2026-10-01T03:55:47.277Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record

HighPublished 30 Sep 2026, 22:54 WIB

CVE-2026-47496

CVE-2026-47496

NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and denial …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:54:58.452Z. Updated 2026-10-01T03:55:47.978Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record

HighPublished 30 Sep 2026, 22:54 WIB

CVE-2026-47574

CVE-2026-47574

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause incorrect resource transfer between spheres. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:54:57.287Z. Updated 2026-10-01T03:55:48.736Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record

HighPublished 30 Sep 2026, 22:54 WIB

CVE-2026-47544

CVE-2026-47544

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:54:55.848Z. Updated 2026-10-01T03:55:49.475Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record

HighPublished 30 Sep 2026, 22:54 WIB

CVE-2026-47541

CVE-2026-47541

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:54:54.696Z. Updated 2026-10-01T03:55:50.197Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record

HighPublished 30 Sep 2026, 22:54 WIB

CVE-2026-47536

CVE-2026-47536

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:54:53.437Z. Updated 2026-10-01T03:55:50.893Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record

HighPublished 30 Sep 2026, 22:54 WIB

CVE-2026-47535

CVE-2026-47535

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:54:51.967Z. Updated 2026-10-01T03:55:51.755Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record

HighPublished 30 Sep 2026, 22:54 WIB

CVE-2026-47521

CVE-2026-47521

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:54:42.363Z. Updated 2026-10-01T03:55:52.454Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record

HighPublished 30 Sep 2026, 22:54 WIB

CVE-2026-47520

CVE-2026-47520

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:54:40.980Z. Updated 2026-10-01T03:55:53.177Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record