Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 14,934 published records · 32 KEV · 14,934 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

14,934 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2258.2%
High5,37436%
Med4,26529%
Low4232.8%
None20.01%
Legacy00.00%
Unscored3,64524%

Matching records by UTC month

Sep 2614,934

Signal coverage

KEV-listed: 32
With a forecast: 14,934
Unknown date: 0
Unscored severity: 3,645

Share of cohort: KEV 0.21% · forecast 100% · unscored 24%.

Showing 1901–1920 of 14,934By severity band: Critical · 9.0–10.0 1,225, High · 7.0–8.9 5,374, Medium · 4.0–6.9 4,265, Low · 0.1–3.9 423, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 3,645

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100573

OpenClaw before 2026.8.1 Sandbox Policy Bypass via MCP Loopback

OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback component that allows sandboxed coding-agent sessions to invoke tools explicitly denied by sandbox.tools.deny policy. Attackers can list and invoke denied tools to access data or perform actions the operator intended to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:01.589Z. Updated 2026-09-30T00:26:34.127Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:26 WIB

Official record

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100572

OpenClaw before 2026.8.1 Denial of Service via Rate Limit

OpenClaw versions >= 2026.3.25 and < 2026.8.1 apply invalid-token rate limiting for Synology Chat webhooks before authentication and key the limit on the raw proxy socket address. In deployments where OpenClaw sits behind a trusted reverse proxy or tunnel and multiple external clients share a single socket address, an …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1901 to 1920 of 14934.First page Next page

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:00.905Z. Updated 2026-10-05T14:55:03.253Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

MedPublished 26 Sep 2026, 09:19 WIB

CVE-2026-100571

OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypass

OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-request rate limit before Twilio signature verification and identify clients only by the raw proxy socket address. In deployments where the SMS/Twilio webhook sits behind a trusted reverse proxy or tunnel so that multipl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:19:00.237Z. Updated 2026-09-28T17:34:34.301Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:34 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100570

OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDK_PYTHON_ARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when gcloud is launche…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:59.552Z. Updated 2026-09-29T17:04:34.937Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 00:04 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100569

OpenClaw before 2026.8.1 Credential Exposure via Endpoint Override

OpenClaw is an npm-distributed application. In versions >= 2026.4.25 and < 2026.8.1, the workspace environment-variable filter did not block variables ending in `_ENDPOINT`, so an untrusted workspace `.env` file could set AZURE_SPEECH_ENDPOINT. Azure Speech preferred that value over the configured region, so when a syn…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:58.839Z. Updated 2026-09-30T00:25:54.448Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:25 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100568

OpenClaw before 2026.8.1 Unauthorized Command Job Access

OpenClaw versions before 2026.8.1 fail to properly restrict access to operator command cron jobs, allowing model-visible agent callers to read and execute ownerless command jobs. Attackers can inspect stored environment variables and force-run disabled or unscheduled command jobs to access secrets and execute operator-…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:58.162Z. Updated 2026-10-05T14:55:03.418Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100567

OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname

OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions >= 2026.4.5 and < 2026.8.1, the Gateway validated a single DNS resolution result for a configured remote Chrome DevTools Protocol (CDP) hostname, but the raw WebSocket and Playwright transports performed a later, independent DNS resolut…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:57.448Z. Updated 2026-09-28T17:36:49.515Z.

CVSS8.9v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:36 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100566

OpenClaw LINE before 2026.8.1 Access Control Inheritance

OpenClaw LINE versions before 2026.8.1 contain an access control vulnerability where group allowlist mode silently inherits DM allowFrom values when groupAllowFrom is not explicitly configured. Attackers with group participation can trigger the agent despite configured group allowlist restrictions when DM access is bro…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:56.767Z. Updated 2026-10-08T15:21:47.715Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:21 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100564

OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:56.103Z. Updated 2026-09-30T00:24:34.147Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:24 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100563

OpenClaw before 2026.8.1 CSV Formula Injection via Session Labels

OpenClaw (npm package `openclaw`) before 2026.8.1 does not neutralize leading characters that spreadsheet applications interpret as formulas when the Control UI exports session data to CSV. Although session labels were quoted as CSV text, a lower-trust participant who can influence a session label or the first user mes…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:55.393Z. Updated 2026-10-05T14:55:03.547Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100562

OpenClaw before 2026.8.1 Authorization Bypass via sessions.create

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in the sessions.create endpoint that allows operator.write callers to modify session configurations reserved for operator.admin scope. Attackers with write-scoped credentials can change existing session model, provider, thinking level, and …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:54.637Z. Updated 2026-09-28T17:37:22.321Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:37 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100561

OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper

OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain an approval-bypass flaw in the exec approval policy: the policy could trust a command-running wrapper without inspecting the command carried in its arguments. After an operator allowlisted or permanently approved a benign wrapper invocation,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:53.923Z. Updated 2026-09-29T17:08:16.130Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 00:08 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100560

OpenClaw before 2026.8.1 Reusable Exec Approvals Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability where Allow Always approvals for exact commands persist as path-only grants on macOS and Linux. Attackers can reuse the same executable with different arguments to execute commands without triggering new approval prompts, potentially access…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:53.219Z. Updated 2026-09-30T00:23:58.906Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:23 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100559

OpenClaw before 2026.8.1 Command Injection via Escaped Newlines

OpenClaw versions before 2026.8.1 contain a command parser vulnerability where escaped newlines confuse exec allowlist parsing, allowing hidden commands to execute. Attackers can craft input with escaped newlines to bypass allowlist validation and execute additional commands without expected authorization prompts.

Excerpt language: en.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:52.489Z. Updated 2026-10-05T14:55:03.674Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100558

OpenClaw before 2026.8.1 Resource Exhaustion via WebSocket Upgrade

OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in the Gateway listener that allows unauthenticated clients to retain response sockets by sending WebSocket upgrade requests without matching connection semantics. Attackers can repeatedly send malformed upgrade requests to exhaust listener r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:51.811Z. Updated 2026-09-28T17:38:11.262Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:38 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100557

OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in skill tool dispatch that fails to carry the sender's owner status. Non-owner senders authorized to invoke skill commands can access owner-only tools and server credentials reserved for owners.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:51.129Z. Updated 2026-09-29T17:09:12.332Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 00:09 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100556

OpenClaw before 2026.8.1 Authentication Bypass via Session Reset

OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an incorrect authorization vulnerability in WhatsApp group handling. A group sender who is admitted for ordinary messages but denied by commands.allowFrom or owner command authorization can issue the /new <model> command to reset the shared gro…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:50.427Z. Updated 2026-09-30T00:23:16.050Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 07:23 WIB

Official record

HighPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100555

OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery

OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gateway validated a single DNS result for a supplied file URL but then passed the original hostname to the Synology NAS, where it could resolve to a different destina…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:49.708Z. Updated 2026-10-05T14:55:03.826Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated05 Oct 2026, 21:55 WIB

Official record

LowPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100554

OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass

OpenClaw (npm package 'openclaw') versions >= 2026.5.12 and < 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invalidates the WebSocket client, but Canvas HTTP authorization continues to accept and renew the previously granted capability until WebSocket cl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:49.013Z. Updated 2026-09-28T17:38:43.352Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 00:38 WIB

Official record

MedPublished 26 Sep 2026, 09:18 WIB

CVE-2026-100553

OpenClaw 2026.6.9 before 2026.8.1 Cross-Context Policy Bypass via Feishu unpin

OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feishu unpin feature, so unpin requests can bypass the shared same-provider cross-context target check. When tools.message.crossContext.allowWithinProvider is disabled, an admitted (authenticated) sender …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-26T02:18:48.240Z. Updated 2026-09-29T17:10:13.838Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 00:10 WIB

Official record