Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 14,934 published records · 32 KEV · 14,934 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

14,934 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2258.2%
High5,37436%
Med4,26529%
Low4232.8%
None20.01%
Legacy00.00%
Unscored3,64524%

Matching records by UTC month

Sep 2614,934

Signal coverage

KEV-listed: 32
With a forecast: 14,934
Unknown date: 0
Unscored severity: 3,645

Share of cohort: KEV 0.21% · forecast 100% · unscored 24%.

Showing 1221–1240 of 14,934By severity band: Critical · 9.0–10.0 1,225, High · 7.0–8.9 5,374, Medium · 4.0–6.9 4,265, Low · 0.1–3.9 423, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 3,645

HighPublished 29 Sep 2026, 08:27 WIB

CVE-2026-96326

HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T01:27:51.301Z. Updated 2026-09-30T15:28:20.488Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 22:28 WIB

Official record

MedPublished 29 Sep 2026, 08:15 WIB

CVE-2026-101858

RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection

A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of the file src/RaspAP/Networking/Hotspot/WiFiManager.php of the component SSID Processing. This manipulation of the argument ssid causes os command injection. The attack can be initiated remotely. The ex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1221 to 1240 of 14934.First page Next page

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T01:15:15.238Z. Updated 2026-09-29T17:27:09.184Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 00:27 WIB

Official record

CritPublished 29 Sep 2026, 08:00 WIB

CVE-2026-101354

FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow

A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the function _tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The exploit has been relea…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T01:00:13.147Z. Updated 2026-09-29T10:45:44.344Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 17:45 WIB

Official record

MedPublished 29 Sep 2026, 07:45 WIB

CVE-2026-101281

Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_sp2_find_mailfrom_domain of the file libopendmarc/opendmarc_spf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible to be carried out…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:45:11.946Z. Updated 2026-10-01T15:27:22.750Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:27 WIB

Official record

MedPublished 29 Sep 2026, 07:33 WIB

CVE-2026-102374

GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP Connector

GestSup versions before 3.2.62 contain a stored cross-site scripting vulnerability in the IMAP OAuth connector that double-decodes MIME-encoded email subjects after HTML escaping. Unauthenticated attackers can send crafted emails to monitored mailboxes with nested MIME encoded-words to inject JavaScript that executes i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:33:24.255Z. Updated 2026-09-30T11:15:14.390Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 18:15 WIB

Official record

HighPublished 29 Sep 2026, 07:33 WIB

CVE-2026-102373

GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter

GestSup versions before 3.2.62 fail to validate ticket ownership when loading comments via the threadedit parameter in thread.php. Authenticated attackers can enumerate sequential comment IDs to read private comments from other users' tickets without proper authorization checks.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:33:23.523Z. Updated 2026-10-01T15:26:09.007Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:26 WIB

Official record

MedPublished 29 Sep 2026, 07:33 WIB

CVE-2026-102372

GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector

GestSup versions before 3.2.61 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store arbitrary JavaScript in ticket descriptions and replies. Attackers can send emails to the monitored mailbox containing script tags and event handlers that execute in techni…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:33:22.841Z. Updated 2026-09-30T11:15:13.090Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 18:15 WIB

Official record

MedPublished 29 Sep 2026, 07:30 WIB

CVE-2026-101280

Trusted Domain Project OpenDMARC Multi-Record Set opendmarc_policy_query_dmarc authentication spoofing

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_query_dmarc of the component Multi-Record Set Handler. The manipulation results in authentication bypass by spoofing. The attack can be executed remotely. The exploit is now public and may be used. Th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:30:15.504Z. Updated 2026-09-29T17:28:50.639Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 00:28 WIB

Official record

MedPublished 29 Sep 2026, 07:15 WIB

CVE-2026-101279

Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarc_policy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack is possible. The explo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:15:09.911Z. Updated 2026-09-29T10:48:56.943Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated29 Sep 2026, 17:48 WIB

Official record

MedPublished 29 Sep 2026, 07:00 WIB

CVE-2026-101278

Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_get_tld of the file libopendmarc/opendmarc_tld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched remotely. The exploit has…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:12.788Z. Updated 2026-10-01T15:23:54.171Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:23 WIB

Official record

UnscoredPublished 29 Sep 2026, 07:00 WIB

CVE-2024-31026

CVE-2024-31026

An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:00.000Z. Updated 2026-10-01T15:19:37.387Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:19 WIB

Official record

UnscoredPublished 29 Sep 2026, 07:00 WIB

CVE-2024-31027

CVE-2024-31027

Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:00.000Z. Updated 2026-09-30T20:11:10.854Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2026, 03:11 WIB

Official record

UnscoredPublished 29 Sep 2026, 07:00 WIB

CVE-2026-39117

CVE-2026-39117

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:00.000Z. Updated 2026-09-29T20:23:57.947Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 03:23 WIB

Official record

UnscoredPublished 29 Sep 2026, 07:00 WIB

CVE-2026-67987

CVE-2026-67987

crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in think-tag response parsing on Ruby 3.1.x. A malicious or anomalous model response containing many unterminated <think> tags can cause excessive CPU consumption in two consecutive…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:00.000Z. Updated 2026-10-01T15:22:56.624Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:22 WIB

Official record

UnscoredPublished 29 Sep 2026, 07:00 WIB

CVE-2026-67993

CVE-2026-67993

basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:00.000Z. Updated 2026-09-30T19:43:47.671Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2026, 02:43 WIB

Official record

UnscoredPublished 29 Sep 2026, 07:00 WIB

CVE-2026-77177

CVE-2026-77177

Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prompt injection (with Jinja2 template syntax) can be used to achieve server-side expression evaluation without sanitization.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:00.000Z. Updated 2026-09-29T19:49:32.986Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 02:49 WIB

Official record

MedPublished 29 Sep 2026, 07:00 WIB

CVE-2026-79348

CVE-2026-79348

KitchenAsty through 0.3.0 contains a broken object level authorization (IDOR) vulnerability in the reservations API. The endpoint GET /api/reservations/:id in packages/server applies the authenticate middleware but performs no ownership or role check, and the getReservation handler in packages/server/src/controllers/re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:00.000Z. Updated 2026-09-30T15:10:41.953Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 22:10 WIB

Official record

UnscoredPublished 29 Sep 2026, 07:00 WIB

CVE-2026-79403

CVE-2026-79403

An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:00.000Z. Updated 2026-09-30T20:11:10.723Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2026, 03:11 WIB

Official record

UnscoredPublished 29 Sep 2026, 07:00 WIB

CVE-2026-79417

CVE-2026-79417

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via a TOCTOU condition in IRP_MJ_CREATE and send a crafted IOCTL 0x9C4024A8 request, causing denial-of-service.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:00.000Z. Updated 2026-09-30T20:11:10.584Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2026, 03:11 WIB

Official record

UnscoredPublished 29 Sep 2026, 07:00 WIB

CVE-2026-79534

CVE-2026-79534

mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath (filesystemserver/handler/helper.go). When filepath.EvalSymlinks returns os.IsNotExist for a dangling symlink, the fallback validates only the parent directory and returns the unresolved path,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T00:00:00.000Z. Updated 2026-09-30T20:11:11.005Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2026, 03:11 WIB

Official record