Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 1501–1520 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

MedPublished 27 Aug 2026, 03:10 WIB

CVE-2026-55227

Observable object existence disclosure in private Weblate projects via globally scoped object lookups

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 (Forbidden) instead of 404 (Not Found) when a user requests an object they are not authorized t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T20:10:39.333Z. Updated 2026-08-27T13:51:40.681Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 20:51 WIB

Official record

MedPublished 27 Aug 2026, 02:57 WIB

CVE-2026-71054

CVE-2026-71054

Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1501 to 1520 of 12259.First page Next page

Published 2026-08-26T19:57:04.287Z. Updated 2026-08-26T20:25:09.364Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 03:25 WIB

Official record

LowPublished 27 Aug 2026, 02:56 WIB

CVE-2026-77508

Weblate: Unverified REST API email changes

Weblate is a web based localization tool. Prior to 2026.8, an authenticated user can change the account's primary email through PUT or PATCH requests to /api/users/{username}/ without verifying the new address, allowing a later team invitation for that address to be accepted without access to the intended recipient's m…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:56:59.825Z. Updated 2026-08-27T14:32:57.362Z.

CVSS3.5v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 21:32 WIB

Official record

MedPublished 27 Aug 2026, 02:53 WIB

CVE-2026-75601

Static Web Server: Authentication bypass on /metrics endpoint when --basic-auth is enabled

Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. Through 2.43.0, instances with both basic-auth and metrics features enabled process the /metrics endpoint before the basic-auth check in src/handler.rs, allowing an unauthenticated remote attacker to retrieve Prometheus me…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:53:29.160Z. Updated 2026-08-29T02:48:59.562Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated29 Aug 2026, 09:48 WIB

Official record

CritKEVPublished 27 Aug 2026, 02:45 WIB

CVE-2026-60004

CVE-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.

Published 2026-08-26T19:45:00.000Z. Updated 2026-09-08T18:03:21.873Z.

CVSS9.8v3.1KEVListedEPSSPresentUpdated09 Sep 2026, 01:03 WIB

Official record

HighPublished 27 Aug 2026, 02:37 WIB

CVE-2026-79938

CVE-2026-79938

Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Excerpt language: en.

Severity high: primary CNA CVSS 7.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:37:36.076Z. Updated 2026-08-27T14:33:06.905Z.

CVSS7.6v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 21:33 WIB

Official record

MedPublished 27 Aug 2026, 02:32 WIB

CVE-2026-79939

CVE-2026-79939

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:32:57.153Z. Updated 2026-08-27T15:21:36.311Z.

CVSS5.8v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 22:21 WIB

Official record

HighPublished 27 Aug 2026, 02:32 WIB

CVE-2026-46369

Nimiq: Validity store off by one error

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::is_valid_at, allowing a remote attacker to replay the same signed tr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:32:46.025Z. Updated 2026-08-27T15:22:58.317Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 22:22 WIB

Official record

HighPublished 27 Aug 2026, 02:30 WIB

CVE-2026-66003

Frappe: Access control bypass via REST API dot-notation fields on linked doctypes

Frappe is a full-stack web application framework written in Python and JavaScript. Prior to version 15.115.0, an access control bypass in the REST API allows a user to read data from Linked DocTypes that they are not authorized to access. When a document references another document through a Link field, the framework d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:30:28.968Z. Updated 2026-08-27T14:44:42.733Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 21:44 WIB

Official record

MedPublished 27 Aug 2026, 02:28 WIB

CVE-2026-49809

CVE-2026-49809

Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:28:34.851Z. Updated 2026-08-28T18:35:57.350Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated29 Aug 2026, 01:35 WIB

Official record

MedPublished 27 Aug 2026, 02:22 WIB

CVE-2026-47848

Reactor Netty WebSocket Client Leaks Credentials On Redirect

In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:22:26.712Z. Updated 2026-08-26T19:44:38.993Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 02:44 WIB

Official record

MedPublished 27 Aug 2026, 02:22 WIB

CVE-2026-47844

Reactor Netty HTTP Server Leaks Exception Details

In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:22:25.677Z. Updated 2026-08-26T19:44:53.514Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 02:44 WIB

Official record

LowPublished 27 Aug 2026, 02:22 WIB

CVE-2026-47843

Reactor Netty may incorrectly route traffic due to DNS resolver reuse

In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

Excerpt language: en.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:22:24.697Z. Updated 2026-08-26T19:45:10.489Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 02:45 WIB

Official record

MedPublished 27 Aug 2026, 02:22 WIB

CVE-2026-47842

Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation

Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES/CBC using a null (all-zero) initialization vector. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:22:23.745Z. Updated 2026-08-26T19:45:25.424Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 02:45 WIB

Official record

MedPublished 27 Aug 2026, 02:22 WIB

CVE-2026-47834

Spring Data JPA Sort expression validation bypass

Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:22:22.873Z. Updated 2026-08-26T19:45:40.524Z.

CVSS4.8v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 02:45 WIB

Official record

HighPublished 27 Aug 2026, 02:21 WIB

CVE-2026-77652

Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index

A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren->pPal = g_new0(WPGColorRGB, 256); When handling a WPG_COLORMAP record, the parser reads a start index (i16) and number of…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:21:39.936Z. Updated 2026-08-27T14:43:23.737Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 21:43 WIB

Official record

HighPublished 27 Aug 2026, 02:17 WIB

CVE-2026-74770

CVE-2026-74770

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:17:41.915Z. Updated 2026-08-27T14:33:15.683Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 21:33 WIB

Official record

HighPublished 27 Aug 2026, 02:13 WIB

CVE-2026-54245

Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is vulnerable to SQL injection through a host-supplied value that is used in a database query without proper parameterization, allowing an attacker who controls a si…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:13:22.415Z. Updated 2026-08-27T13:49:51.927Z.

CVSS7.6v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 20:49 WIB

Official record

MedPublished 27 Aug 2026, 02:11 WIB

CVE-2026-74771

CVE-2026-74771

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:11:48.631Z. Updated 2026-08-27T15:25:00.027Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 22:25 WIB

Official record

MedPublished 27 Aug 2026, 02:06 WIB

CVE-2026-46371

Fleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint (GET /api/v1/fleet/mdm/apple/commands) allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined database tables, inclu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-26T19:06:12.147Z. Updated 2026-08-27T14:33:22.566Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 21:33 WIB

Official record