Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 1641–1660 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

MedPublished 27 Oct 2026, 07:45 WIB

CVE-2026-116623

code-projects Simple Content Management System Admin welcome.php authorization

A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now publ…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:45:20.926Z. Updated 2026-10-27T00:45:20.926Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:45 WIB

Official record

HighPublished 27 Oct 2026, 07:44 WIB

CVE-2026-116837

CVE-2026-116837

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1641 to 1660 of 16156.First page Next page

Published 2026-10-27T00:44:48.129Z. Updated 2026-10-27T00:44:48.129Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:44 WIB

Official record

MedPublished 27 Oct 2026, 07:34 WIB

CVE-2026-116844

Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P

Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:34:02.373Z. Updated 2026-10-29T10:52:21.022Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:52 WIB

Official record

HighPublished 27 Oct 2026, 07:34 WIB

CVE-2026-116843

Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trus…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:34:01.754Z. Updated 2026-10-27T00:34:01.754Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:34 WIB

Official record

MedPublished 27 Oct 2026, 07:34 WIB

CVE-2026-116842

DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow via libmpq__archive_dup

DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the ga…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:34:01.167Z. Updated 2026-10-27T00:34:01.167Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:34 WIB

Official record

MedPublished 27 Oct 2026, 07:34 WIB

CVE-2026-116841

DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmpq Hash Table Lookup

DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:34:00.513Z. Updated 2026-10-27T00:34:00.513Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:34 WIB

Official record

MedPublished 27 Oct 2026, 07:33 WIB

CVE-2026-116840

llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader

llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:33:59.834Z. Updated 2026-10-27T14:14:10.931Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:14 WIB

Official record

MedPublished 27 Oct 2026, 07:33 WIB

CVE-2026-116829

llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader

llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:33:59.223Z. Updated 2026-10-27T00:33:59.223Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:33 WIB

Official record

HighPublished 27 Oct 2026, 07:33 WIB

CVE-2026-116816

llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model l…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:33:58.581Z. Updated 2026-10-27T00:33:58.581Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:33 WIB

Official record

MedPublished 27 Oct 2026, 07:33 WIB

CVE-2025-71439

llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-server to read past id_t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:33:57.956Z. Updated 2026-10-27T00:33:57.956Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:33 WIB

Official record

HighPublished 27 Oct 2026, 07:33 WIB

CVE-2024-58400

llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:33:57.354Z. Updated 2026-10-27T14:14:21.519Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:14 WIB

Official record

MedPublished 27 Oct 2026, 07:33 WIB

CVE-2024-58399

llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets

llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adja…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:33:56.695Z. Updated 2026-10-27T00:33:56.695Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:33 WIB

Official record

HighPublished 27 Oct 2026, 07:32 WIB

CVE-2026-116836

CVE-2026-116836

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:32:06.956Z. Updated 2026-10-27T00:32:06.956Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:32 WIB

Official record

MedPublished 27 Oct 2026, 07:30 WIB

CVE-2026-116620

Tencent RapidJSON Regex stream.h Take out-of-bounds

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit has …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:30:22.548Z. Updated 2026-10-27T14:14:50.011Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:14 WIB

Official record

MedPublished 27 Oct 2026, 07:15 WIB

CVE-2026-116608

DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check

A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function load_pretrained_model of the file videollama2/model/__init__.py of the component Model Loading. The manipulation of the argument _name_or_path leads to improper validation of integrity check value. R…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:15:18.298Z. Updated 2026-10-27T00:15:18.298Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:15 WIB

Official record

MedPublished 27 Oct 2026, 07:00 WIB

CVE-2026-116605

SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been made…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:00:20.582Z. Updated 2026-10-27T00:00:20.582Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:00 WIB

Official record

UnscoredPublished 27 Oct 2026, 07:00 WIB

CVE-2026-107067

CVE-2026-107067

An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:00:00.000Z. Updated 2026-10-27T13:57:41.003Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 20:57 WIB

Official record

UnscoredPublished 27 Oct 2026, 07:00 WIB

CVE-2026-78845

CVE-2026-78845

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root description parsing.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T00:00:00.000Z. Updated 2026-10-27T14:17:16.840Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:17 WIB

Official record

MedPublished 27 Oct 2026, 06:45 WIB

CVE-2026-116604

SourceCodester Online Food Ordering System delete_admin.php missing authentication

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the pub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T23:45:20.080Z. Updated 2026-10-27T14:15:12.149Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:15 WIB

Official record

MedPublished 27 Oct 2026, 06:30 WIB

CVE-2026-116603

SourceCodester Online Food Ordering System add_food.php unrestricted upload

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T23:30:13.680Z. Updated 2026-10-26T23:30:13.680Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 06:30 WIB

Official record