Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 1141–1160 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

MedPublished 24 Apr 2026, 04:58 WIB

CVE-2026-41344

OpenClaw < 2026.3.28 - Privilege Escalation via chat.send /verbose Parameter

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the chat.send endpoint that allows write-scoped gateway callers to persist admin-only verboseLevel session overrides. Attackers can exploit the /verbose parameter to bypass access controls and expose sensitive reasoning or tool output intended t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:58:02.772Z. Updated 2026-04-24T18:19:18.188Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated25 Apr 2026, 01:19 WIB

Official record

MedPublished 24 Apr 2026, 04:58 WIB

CVE-2026-41343

OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrency

OpenClaw before 2026.3.31 lacks a shared pre-auth concurrency budget on the public LINE webhook path, allowing attackers to cause transient availability loss. Remote attackers can flood the webhook endpoint with concurrent requests before signature verification to exhaust resources and degrade service availability.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1141 to 1160 of 5813.First page Next page

Published 2026-04-23T21:58:02.040Z. Updated 2026-04-24T14:32:21.869Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Apr 2026, 21:32 WIB

Official record

HighPublished 24 Apr 2026, 04:58 WIB

CVE-2026-41342

OpenClaw < 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote Onboarding

OpenClaw before 2026.3.28 contains an authentication bypass vulnerability in the remote onboarding component that persists unauthenticated discovery endpoints without explicit trust confirmation. Attackers can spoof discovery endpoints to redirect onboarding toward malicious gateways and capture gateway credentials or …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:58:01.251Z. Updated 2026-04-24T11:01:54.589Z.

CVSS7.4v4.0KEVNot listedEPSSPresentUpdated24 Apr 2026, 18:01 WIB

Official record

LowPublished 24 Apr 2026, 04:58 WIB

CVE-2026-41341

OpenClaw < 2026.3.31 - Component Interaction Misclassification in Discord Extension

OpenClaw before 2026.3.31 contains a logic error in Discord component interaction routing that misclassifies group direct messages as direct messages in extensions/discord/src/monitor/agent-components-helpers.ts. Attackers can exploit this misclassification to bypass group DM policy enforcement or trigger incorrect ses…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:58:00.325Z. Updated 2026-04-25T01:34:11.541Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated25 Apr 2026, 08:34 WIB

Official record

MedPublished 24 Apr 2026, 04:57 WIB

CVE-2026-41340

OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migration

OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust into all named accounts. Attackers can exploit this trust propagation to bypass authentication controls and gain unauthorized access to named accounts.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:57:59.491Z. Updated 2026-04-24T16:40:12.203Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated24 Apr 2026, 23:40 WIB

Official record

MedPublished 24 Apr 2026, 04:57 WIB

CVE-2026-41339

OpenClaw < 2026.4.2 - Information Disclosure via Gateway Connect Snapshot

OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients. Non-admin clients can recover host-specific filesystem paths and deployment details, enabling host fingerprinting and facilitating chained attacks.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:57:58.635Z. Updated 2026-04-24T13:34:55.427Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated24 Apr 2026, 20:34 WIB

Official record

MedPublished 24 Apr 2026, 04:57 WIB

CVE-2026-41338

OpenClaw < 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File Operations

OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses. Attackers can exploit check-then-act patterns in apply_patch, remove, and mkdir operations to manipulate files between validation and execution.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:57:57.757Z. Updated 2026-04-24T18:19:24.482Z.

CVSS4.3v4.0KEVNot listedEPSSPresentUpdated25 Apr 2026, 01:19 WIB

Official record

MedPublished 24 Apr 2026, 04:57 WIB

CVE-2026-41337

OpenClaw < 2026.3.31 - Callback Origin Mutation in Plivo Voice-call Replay

OpenClaw before 2026.3.31 contains a callback origin mutation vulnerability in Plivo voice-call replay that allows attackers to mutate in-process callback origin before replay rejection. Attackers with captured valid callbacks for live calls can exploit this to manipulate callback origins during the replay process.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:57:57.030Z. Updated 2026-04-24T14:28:46.988Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated24 Apr 2026, 21:28 WIB

Official record

HighPublished 24 Apr 2026, 04:57 WIB

CVE-2026-41336

OpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable Override

OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabling loading of attacker-controlled hook code. Attackers can replace trusted default-on bundled hooks from untrusted workspaces to execute arbitrary code.

Excerpt language: en.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:57:56.165Z. Updated 2026-04-24T11:03:12.589Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated24 Apr 2026, 18:03 WIB

Official record

MedPublished 24 Apr 2026, 04:57 WIB

CVE-2026-41335

OpenClaw < 2026.3.31 - Information Disclosure via Control UI Bootstrap JSON

OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that exposes version and assistant agent identifiers. Attackers can extract sensitive fingerprinting information from the Control UI bootstrap payload to identify system versions and agent configurations.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:57:55.283Z. Updated 2026-04-25T01:33:10.688Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated25 Apr 2026, 08:33 WIB

Official record

HighPublished 24 Apr 2026, 04:57 WIB

CVE-2026-41334

OpenClaw < 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard Bypass

OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips. Attackers can exploit this by uploading oversized images to cause denial of service through excessive memory consumption.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:57:54.564Z. Updated 2026-04-24T16:41:10.107Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated24 Apr 2026, 23:41 WIB

Official record

MedPublished 24 Apr 2026, 04:57 WIB

CVE-2026-41333

OpenClaw < 2026.3.31 - Authentication Rate Limiting Bypass via Fake DeviceToken

OpenClaw before 2026.3.31 contains an authentication rate limiting bypass vulnerability that allows attackers to circumvent shared authentication protections using fake device tokens. Attackers can exploit the mixed WebSocket authentication flow to bypass rate limiting controls and conduct brute force attacks against w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:57:53.810Z. Updated 2026-04-24T13:35:46.057Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated24 Apr 2026, 20:35 WIB

Official record

MedPublished 24 Apr 2026, 04:57 WIB

CVE-2026-41332

OpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable Blocklist

OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CONFIG_FILE are not blocked in the host-env blocklist. Attackers can exploit approved exec requests to redirect git or AWS CLI behavior through attacker-controlled configuration files to execute untruste…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:57:52.999Z. Updated 2026-04-24T18:19:30.910Z.

CVSS5.8v4.0KEVNot listedEPSSPresentUpdated25 Apr 2026, 01:19 WIB

Official record

LowPublished 24 Apr 2026, 04:51 WIB

CVE-2026-2708

Libsoup: libsoup: http request smuggling via duplicate content-length headers

A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP req…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:51:23.475Z. Updated 2026-04-24T14:55:14.618Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated24 Apr 2026, 21:55 WIB

Official record

HighPublished 24 Apr 2026, 04:37 WIB

CVE-2026-32172

Microsoft Power Apps Remote Code Execution Vulnerability

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:37:42.706Z. Updated 2026-10-15T15:53:50.013Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 22:53 WIB

Official record

CritPublished 24 Apr 2026, 04:37 WIB

CVE-2026-35431

Microsoft Entra ID Entitlement Management Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.

Excerpt language: en.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:37:42.137Z. Updated 2026-10-15T15:53:49.542Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 22:53 WIB

Official record

CritPublished 24 Apr 2026, 04:37 WIB

CVE-2026-24303

Microsoft Partner Center Elevation of Privilege Vulnerability

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:37:41.267Z. Updated 2026-10-15T15:53:49.076Z.

CVSS9.6v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 22:53 WIB

Official record

HighPublished 24 Apr 2026, 04:37 WIB

CVE-2026-26150

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:37:40.463Z. Updated 2026-10-15T15:53:48.636Z.

CVSS8.6v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 22:53 WIB

Official record

CritPublished 24 Apr 2026, 04:35 WIB

CVE-2026-33819

Microsoft Bing Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.

Excerpt language: en.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:35:50.367Z. Updated 2026-10-15T15:52:11.787Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 22:52 WIB

Official record

CritPublished 24 Apr 2026, 04:35 WIB

CVE-2026-33102

Microsoft 365 Copilot Elevation of Privilege Vulnerability

Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-23T21:35:48.984Z. Updated 2026-10-15T15:52:08.039Z.

CVSS9.3v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 22:52 WIB

Official record