Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 1221–1240 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

MedPublished 27 Oct 2026, 23:40 WIB

CVE-2026-116674

systeminformation: Prototype pollution in `networkStats()` via the interface name

systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, OpenBSD, and NetBSD stores per-interface data in the plain-object _network cache and indexes it with the sanitized caller-controlled interface name. Passing proto causes the inherit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:40:46.246Z. Updated 2026-10-27T16:40:46.246Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:40 WIB

Official record

MedPublished 27 Oct 2026, 23:40 WIB

CVE-2026-57185

Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the `PJSIP MWI body parser` by sending a carefully crafted `SIP NOTIFY`…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1221 to 1240 of 16156.First page Next page

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:40:27.615Z. Updated 2026-10-27T16:40:27.615Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:40 WIB

Official record

CritPublished 27 Oct 2026, 23:38 WIB

CVE-2026-48360

Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:38:56.785Z. Updated 2026-10-29T03:56:34.974Z.

CVSS9.6v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 10:56 WIB

Official record

LowPublished 27 Oct 2026, 23:38 WIB

CVE-2026-116673

systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net

systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) implementation uses the caller-supplied interface value in an fs.existsSync() check and to build /sys/class/net/<iface> paths, including the operstate path, without verifying that it is a single interfa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:38:15.558Z. Updated 2026-10-28T16:15:47.864Z.

CVSS3.3v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:15 WIB

Official record

CritPublished 27 Oct 2026, 23:36 WIB

CVE-2026-108014

eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MIT…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:36:57.891Z. Updated 2026-10-27T20:41:13.359Z.

CVSS9.1v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 03:41 WIB

Official record

HighPublished 27 Oct 2026, 23:35 WIB

CVE-2026-57197

Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded `memcpy` of `OGG/Speex` packet data in `format_ogg_speex` can cause a heap buffer overflow and crash Asterisk when reading a file con…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:35:59.337Z. Updated 2026-10-27T16:35:59.337Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:35 WIB

Official record

HighPublished 27 Oct 2026, 23:32 WIB

CVE-2026-109090

libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow

A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:32:56.867Z. Updated 2026-10-27T16:32:56.867Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:32 WIB

Official record

HighPublished 27 Oct 2026, 23:31 WIB

CVE-2026-116672

Authlib RFC 7592 examples omit registration-access-token client binding

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticate_client and ClientConfigurationEndpoint.check_permission reference implementations look up a target client from request-controlled client_id data and check only whethe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:31:48.429Z. Updated 2026-10-27T16:31:48.429Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:31 WIB

Official record

MedPublished 27 Oct 2026, 23:30 WIB

CVE-2026-117512

oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee_insert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be u…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:30:18.263Z. Updated 2026-10-28T16:15:55.262Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:15 WIB

Official record

MedPublished 27 Oct 2026, 23:26 WIB

CVE-2026-109088

libXtst RECORD EnableContext Reply Endless Loop

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:26:20.597Z. Updated 2026-10-27T16:26:20.597Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:26 WIB

Official record

MedPublished 27 Oct 2026, 23:23 WIB

CVE-2026-48380

Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:23:08.580Z. Updated 2026-10-28T16:16:04.990Z.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:16 WIB

Official record

HighPublished 27 Oct 2026, 23:23 WIB

CVE-2026-48379

Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)

Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:23:08.363Z. Updated 2026-10-29T10:45:45.823Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:45 WIB

Official record

HighPublished 27 Oct 2026, 23:21 WIB

CVE-2026-104349

Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a v…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:21:54.690Z. Updated 2026-10-29T10:45:45.965Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:45 WIB

Official record

MedPublished 27 Oct 2026, 23:16 WIB

CVE-2025-64394

CVE-2025-64394

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:16:58.979Z. Updated 2026-10-27T16:16:58.979Z.

CVSS4.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:16 WIB

Official record

MedPublished 27 Oct 2026, 23:16 WIB

CVE-2026-108141

CVE-2026-108141

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:16:58.971Z. Updated 2026-10-27T16:16:58.971Z.

CVSS5.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:16 WIB

Official record

MedPublished 27 Oct 2026, 23:16 WIB

CVE-2026-106078

CVE-2026-106078

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:16:58.925Z. Updated 2026-10-27T16:16:58.925Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:16 WIB

Official record

HighPublished 27 Oct 2026, 23:16 WIB

CVE-2026-107671

CVE-2026-107671

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.

Excerpt language: en.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:16:58.921Z. Updated 2026-10-27T16:16:58.921Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:16 WIB

Official record

CritPublished 27 Oct 2026, 23:16 WIB

CVE-2026-108142

CVE-2026-108142

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:16:58.907Z. Updated 2026-10-27T16:16:58.907Z.

CVSS9.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:16 WIB

Official record

HighPublished 27 Oct 2026, 23:16 WIB

CVE-2026-106077

CVE-2026-106077

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.

Excerpt language: en.

Severity high: primary CNA CVSS 8.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:16:58.905Z. Updated 2026-10-27T16:16:58.905Z.

CVSS8.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:16 WIB

Official record

CritPublished 27 Oct 2026, 23:16 WIB

CVE-2026-106076

CVE-2026-106076

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account.

Excerpt language: en.

Severity critical: primary CNA CVSS 9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:16:58.882Z. Updated 2026-10-27T16:16:58.882Z.

CVSS9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:16 WIB

Official record