Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 6,933 published records · 23 KEV · 6,933 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

6,933 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit5588.0%
High2,11831%
Med2,24432%
Low2403.5%
None90.13%
Legacy00.00%
Unscored1,76425%

Matching records by UTC month

May 266,933

Signal coverage

KEV-listed: 23
With a forecast: 6,933
Unknown date: 0
Unscored severity: 1,764

Share of cohort: KEV 0.33% · forecast 100% · unscored 25%.

Showing 1581–1600 of 6,933By severity band: Critical · 9.0–10.0 558, High · 7.0–8.9 2,118, Medium · 4.0–6.9 2,244, Low · 0.1–3.9 240, None · scored 0.0 9, Legacy · v2 only 0, Unscored · no CNA metric 1,764

CritPublished 27 May 2026, 07:02 WIB

CVE-2026-9312

Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed access to internal services via path traversal in upload endpoint

A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests to internal services by exploiting insufficient input validation in an upload endpoint. By injecting path traversal content into request parameters, an attacker…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:02:32.159Z. Updated 2026-06-30T20:53:28.093Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated01 Jul 2026, 03:53 WIB

Official record

MedPublished 27 May 2026, 07:00 WIB

CVE-2026-9607

itsourcecode Courier Management System parcel_list.php sql injection

A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is an unknown function of the file /parcel_list.php. Performing a manipulation of the argument s results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Excerpt language: en.

Showing 1581 to 1600 of 6933.First page Next page

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:12.715Z. Updated 2026-05-28T14:17:25.524Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated28 May 2026, 21:17 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2025-67903

CVE-2025-67903

Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-29T15:47:42.405Z.

CVSS—KEVNot listedEPSSPresentUpdated29 May 2026, 22:47 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2025-68712

CVE-2025-68712

SpSoft AppLock (com.sp.protector.free) 7.9.40 for Android allows a local attacker with physical access to bypass fingerprint or PIN authentication. Although the app integrates Android's biometric mechanisms, the lock is implemented with a custom overlay that fails to consistently enforce authentication. By navigating c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-28T15:51:34.786Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 22:51 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2025-69600

CVE-2025-69600

Command injection in Raynet rvia RayVentory Scan Engine 12.6 Update 8 and previous versions allows adversaries to execute commands via getconfig, upload, inventory, and oracle options.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-06-01T15:46:05.552Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:46 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2025-70103

CVE-2025-70103

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-30T19:30:38.829Z.

CVSS—KEVNot listedEPSSPresentUpdated31 May 2026, 02:30 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2025-70116

CVE-2025-70116

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields (e.g., codec/mime/profile strings). gf_media_map_esd then calls strlen() on a NULL pointer, triggering a crash (ASan SEGV).

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-30T14:32:36.802Z.

CVSS—KEVNot listedEPSSPresentUpdated30 May 2026, 21:32 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-30498

CVE-2026-30498

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-27T18:25:15.116Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 01:25 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-31266

CVE-2026-31266

Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate).

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-27T18:26:58.308Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 01:26 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-33552

CVE-2026-33552

Northern.tech Mender Enterprise Server before 4.1.1 has Incorrect Access Control.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-28T13:43:43.639Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 20:43 WIB

Official record

HighPublished 27 May 2026, 07:00 WIB

CVE-2026-36044

CVE-2026-36044

@pensar/apex <= 0.0.58 is vulnerable to OS command injection via the smart_enumerate tool. The createSmartEnumerateTool() function in src/core/agent/tools.ts constructs a shell command by concatenating unsanitized values from the extensions array and url parameter into a string passed to Node.js child_process.exec(). B…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-06-03T03:41:20.766Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated03 Jun 2026, 10:41 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-36045

CVE-2026-36045

picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool component (pkg/tools/shell.go). The guardCommand() function attempts to restrict shell command execution using a denylist of 8 regular expressions, but the denylist is incomplete.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-28T13:32:36.668Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 20:32 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-36538

CVE-2026-36538

Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the root account is set to the trivially weak value root, allowing an attacker with access to the device to authenticate as root and gain full control of the underlying operating system.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-07-05T01:34:56.597Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:34 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-36539

CVE-2026-36539

Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router configuration as a JSON response with no authentication required. Any attacker on the LAN can send a single HTTP GET request and instantly retrieve administrator credentials, WiFi passwords, PPPoE credentials…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-28T13:36:27.542Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 20:36 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-36540

CVE-2026-36540

Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the /cgi-bin/skk_set.cgi endpoint. The password and new_pwd_confirm POST parameters are passed directly to the underlying OS shell without sanitization. An attacker can inject arbitrary shell commands by wrapping them in backtic…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-07-05T01:35:00.481Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:35 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-37711

CVE-2026-37711

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/core/actions_addupdatedelete.inc.php

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-27T18:14:11.835Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 01:14 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-37712

CVE-2026-37712

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, call_user_func_array() in function job type

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-28T15:56:17.176Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 22:56 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-37713

CVE-2026-37713

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/core/class/commonobject.class.php.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-28T15:54:56.385Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 22:54 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-38422

CVE-2026-38422

Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmota_xdrv_driver/xdrv_10_scripter.ino, fetch_jpg() function.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-28T13:47:04.356Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 20:47 WIB

Official record

UnscoredPublished 27 May 2026, 07:00 WIB

CVE-2026-38426

CVE-2026-38426

Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv_10_scripter.ino, fetch_jpg(), jpg_task.boundary[40], strcpy() function.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-27T00:00:00.000Z. Updated 2026-05-27T18:19:03.125Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 01:19 WIB

Official record