Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 1521–1540 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

HighPublished 27 Oct 2026, 18:32 WIB

CVE-2026-109995

Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content

The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.9.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T11:32:03.735Z. Updated 2026-10-29T01:52:00.520Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 08:52 WIB

Official record

MedPublished 27 Oct 2026, 18:31 WIB

CVE-2026-90730

CVE-2026-90730

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Access Control vulnerability. An unauthenticated attacker with remot…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1521 to 1540 of 16156.First page Next page

Published 2026-10-27T11:31:02.254Z. Updated 2026-10-27T14:11:59.726Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:11 WIB

Official record

CritPublished 27 Oct 2026, 18:27 WIB

CVE-2026-112362

@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets

@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when Fastify runs with the non-default ignoreDuplicateSlashes option enabled, the plugin matches path-scoped Express middleware against a URL whose duplicate-slash normalization has also collapsed the sepa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T11:27:59.364Z. Updated 2026-10-27T11:27:59.364Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 18:27 WIB

Official record

MedPublished 27 Oct 2026, 18:26 WIB

CVE-2026-90731

CVE-2026-90731

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with rem…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T11:26:19.331Z. Updated 2026-10-29T01:52:06.174Z.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 08:52 WIB

Official record

HighPublished 27 Oct 2026, 18:23 WIB

CVE-2026-41021

CVE-2026-41021

Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T11:23:34.366Z. Updated 2026-10-27T11:23:34.366Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 18:23 WIB

Official record

MedPublished 27 Oct 2026, 18:21 WIB

CVE-2026-90732

CVE-2026-90732

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker wit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T11:21:01.459Z. Updated 2026-10-29T01:52:06.323Z.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 08:52 WIB

Official record

LowPublished 27 Oct 2026, 18:19 WIB

CVE-2026-117499

@fastify/session vulnerable to session revocation bypass via a logout race condition

@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that restored a session before a logout could save its own copy after another request had completed the session destroy call, recreating the destroyed session identifier with its authent…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T11:19:22.090Z. Updated 2026-10-27T11:19:22.090Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 18:19 WIB

Official record

MedPublished 27 Oct 2026, 18:15 WIB

CVE-2026-56084

CVE-2026-56084

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T11:15:06.091Z. Updated 2026-10-27T11:15:06.091Z.

CVSS5.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 18:15 WIB

Official record

HighPublished 27 Oct 2026, 18:06 WIB

CVE-2026-102800

Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0

Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article helpful” voting widget posts a client-supplied ip field to its AJAX handlers (getDeny, getConfirm, getDenyReason in mod_djhelpful_articles/helper.php), reachable without authentication through com_aja…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T11:06:50.198Z. Updated 2026-10-27T11:06:50.198Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 18:06 WIB

Official record

HighPublished 27 Oct 2026, 18:05 WIB

CVE-2026-41020

CVE-2026-41020

Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T11:05:51.545Z. Updated 2026-10-27T11:05:51.545Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 18:05 WIB

Official record

HighPublished 27 Oct 2026, 18:03 WIB

CVE-2026-4337

Unrestricted Upload of File in PuMuKIT application

Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path where the web server user has write permissions. This could also allow them to delete files.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T11:03:15.829Z. Updated 2026-10-27T11:03:15.829Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 18:03 WIB

Official record

MedPublished 27 Oct 2026, 17:59 WIB

CVE-2026-117541

svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()

svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerability that allows attackers to crash callers by submitting well-formed XML without a top-level svg root. Attackers can supply documents with a non-svg root or nested svg element, causing Sanitizer::sanitize() to throw a LogicException instead…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T10:59:34.783Z. Updated 2026-10-27T14:12:13.476Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:12 WIB

Official record

HighPublished 27 Oct 2026, 17:59 WIB

CVE-2026-117540

svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop

svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize() that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic preg_replace passes that exhaust work…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T10:59:34.119Z. Updated 2026-10-27T10:59:34.119Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 17:59 WIB

Official record

MedPublished 27 Oct 2026, 17:59 WIB

CVE-2026-117539

darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass

darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url() values, or image href attributes to exfiltrate page data, track users, or…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T10:59:33.466Z. Updated 2026-10-27T10:59:33.466Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 17:59 WIB

Official record

LowPublished 27 Oct 2026, 17:59 WIB

CVE-2026-117538

REDAXO before 5.21.0 Reflected XSS via Packages API function Parameter

REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the function parameter is concatenated into an error message rendered without HTML escaping. Attackers can lure an authenticated backend user to a crafted link containing a valid CSRF token, executing JavaScr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T10:59:32.772Z. Updated 2026-10-27T10:59:32.772Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 17:59 WIB

Official record

LowPublished 27 Oct 2026, 17:59 WIB

CVE-2026-117537

REDAXO before 5.21.0 Reflected XSS via Metainfo API type Parameter

REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the type parameter of the metainfo_default_fields_create API. Attackers can craft a link with a valid CSRF token and HTML payload that rex_view::message() renders unescaped, executing s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T10:59:32.121Z. Updated 2026-10-27T14:12:21.902Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:12 WIB

Official record

HighPublished 27 Oct 2026, 17:59 WIB

CVE-2026-117536

REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation

REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend user administration page (users/users) because the CSRF token check only runs when the save parameter is set, while the update path triggered by FUNC_UPDATE does not require it. Attackers can lure a logged-in backend user with the u…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T10:59:31.445Z. Updated 2026-10-27T10:59:31.445Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 17:59 WIB

Official record

MedPublished 27 Oct 2026, 17:59 WIB

CVE-2026-117535

REDAXO before 5.21.3 Reflected XSS via opener_link in Media Pool

REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media pool detail page, where the opener_link parameter is rendered without HTML escaping. Unauthenticated attackers can lure logged-in backend users with media permissions into clicking a crafted link. The injected script can t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T10:59:30.773Z. Updated 2026-10-27T10:59:30.773Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 17:59 WIB

Official record

MedPublished 27 Oct 2026, 17:59 WIB

CVE-2026-117534

REDAXO before 5.21.3 CSRF in Article History Plugin

REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows attackers to delete history or roll back content via unvalidated GET requests. Attackers can lure logged-in backend users to a page triggering func=clearall or rex_history_function=snap, permanently dele…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T10:59:30.139Z. Updated 2026-10-27T10:59:30.139Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 17:59 WIB

Official record

LowPublished 27 Oct 2026, 17:59 WIB

CVE-2026-117533

REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads

REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_media_service moves uploaded SVG files into the public media folder before sanitizing them. Authenticated users with mediapool upload rights can race the sanitizer or exhaust memory limits to leave script-laden SVGs public…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T10:59:29.443Z. Updated 2026-10-27T14:12:29.808Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:12 WIB

Official record