Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 1281–1300 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

MedPublished 27 Oct 2026, 22:45 WIB

CVE-2026-117510

Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr00t of the file dexbotic/model/gr00tsonic/gr00tsonic_arch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weight_map causes path traversal. Remote exploitation of th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:45:17.291Z. Updated 2026-10-27T15:45:17.291Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:45 WIB

Official record

MedPublished 27 Oct 2026, 22:30 WIB

CVE-2026-117509

crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal

A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function Persistor._decompress of the file rasa_nlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The project w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1281 to 1300 of 16156.First page Next page

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:30:18.930Z. Updated 2026-10-28T16:16:18.865Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:16 WIB

Official record

HighPublished 27 Oct 2026, 22:22 WIB

CVE-2026-104189

3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint performed no share authorization. Anyone who knows a share token could read the shared file's contents even when the link share…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:22:14.210Z. Updated 2026-10-27T15:22:14.210Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:22 WIB

Official record

HighPublished 27 Oct 2026, 22:19 WIB

CVE-2026-111585

Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the vi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:19:40.571Z. Updated 2026-10-27T15:19:40.571Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:19 WIB

Official record

HighPublished 27 Oct 2026, 22:18 WIB

CVE-2026-111584

Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the service executable in an insufficiently protected temporary di…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:18:50.953Z. Updated 2026-10-27T15:18:50.953Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:18 WIB

Official record

HighPublished 27 Oct 2026, 22:15 WIB

CVE-2026-111583

Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:15:44.411Z. Updated 2026-10-27T15:15:44.411Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:15 WIB

Official record

HighPublished 27 Oct 2026, 22:13 WIB

CVE-2026-111582

Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges. Exploitation requires user interaction.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:13:13.769Z. Updated 2026-10-27T15:13:13.769Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:13 WIB

Official record

HighPublished 27 Oct 2026, 22:11 WIB

CVE-2026-92377

Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a user-writable temporary…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:11:55.955Z. Updated 2026-10-27T15:11:55.955Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:11 WIB

Official record

HighPublished 27 Oct 2026, 22:11 WIB

CVE-2026-92376

Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows

Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary code with NT AUTHORITY\…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:11:08.772Z. Updated 2026-10-27T15:11:08.772Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:11 WIB

Official record

HighPublished 27 Oct 2026, 22:10 WIB

CVE-2026-92375

Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:10:09.611Z. Updated 2026-10-27T15:10:09.611Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:10 WIB

Official record

HighPublished 27 Oct 2026, 22:09 WIB

CVE-2026-92374

Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS

A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to bypass installer package verification and install a malicious package. Successful …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:09:25.189Z. Updated 2026-10-27T15:09:25.189Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:09 WIB

Official record

HighPublished 27 Oct 2026, 22:08 WIB

CVE-2026-92372

Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited by persuading a user to…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:08:28.439Z. Updated 2026-10-27T15:08:28.439Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:08 WIB

Official record

MedPublished 27 Oct 2026, 22:00 WIB

CVE-2026-117507

a2aproject a2a-java TaskManager.saveTaskEvent race condition

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The attack may be initiated remotely. Upgrading to version 1.3.0.Final will fix this issue. The identifier of the patch is 6b8e1e085c35e970e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T15:00:21.118Z. Updated 2026-10-27T15:00:21.118Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 22:00 WIB

Official record

MedPublished 27 Oct 2026, 21:45 WIB

CVE-2026-117506

a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file extras/push-notification-config-store-database-jpa/src/main/java/org/a2aproject/sdk/extras/pushnotificationconfigstore/database/jpa/JpaDatabasePushNotificationConfig…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T14:45:14.820Z. Updated 2026-10-27T14:45:14.820Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:45 WIB

Official record

HighPublished 27 Oct 2026, 21:39 WIB

CVE-2026-117604

Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via a loopback REMOTE_ADDR fallback. Behind a same-host reverse proxy, remote requests appear as loopback, letting attackers read stored…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T14:39:10.858Z. Updated 2026-10-27T14:39:10.858Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:39 WIB

Official record

MedPublished 27 Oct 2026, 21:30 WIB

CVE-2026-117505

a2aproject a2a-java ChildQueue queue.offer resource consumption

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficient to resolve this issu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T14:30:19.859Z. Updated 2026-10-28T16:16:24.531Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:16 WIB

Official record

MedPublished 27 Oct 2026, 21:19 WIB

CVE-2026-105987

Stored XSS in KGS Software tia Viewer

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer renders the annotation and the browser executes the payload. This …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T14:19:02.333Z. Updated 2026-10-27T14:19:02.333Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:19 WIB

Official record

UnscoredPublished 27 Oct 2026, 21:06 WIB

CVE-2026-118027

Frame poisoning in the Layout component

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T14:06:06.303Z. Updated 2026-10-27T14:06:06.303Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:06 WIB

Official record

UnscoredPublished 27 Oct 2026, 21:06 WIB

CVE-2026-118026

Invalid pointer in the JavaScript: GC component

Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T14:06:05.943Z. Updated 2026-10-27T18:18:37.886Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Oct 2026, 01:18 WIB

Official record

UnscoredPublished 27 Oct 2026, 21:06 WIB

CVE-2026-118025

Other issue in the SVG component

Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T14:06:05.536Z. Updated 2026-10-27T18:18:33.578Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Oct 2026, 01:18 WIB

Official record