Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 2401–2420 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

MedPublished 26 Oct 2026, 08:30 WIB

CVE-2026-116106

HeyCyan App FileProvider access control

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did n…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T01:30:20.653Z. Updated 2026-10-26T06:10:23.819Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 13:10 WIB

Official record

MedPublished 26 Oct 2026, 08:15 WIB

CVE-2026-116105

HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission

A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched remotely. The attack require…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2401 to 2420 of 16156.First page Next page

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T01:15:18.741Z. Updated 2026-10-26T16:37:38.696Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 23:37 WIB

Official record

MedPublished 26 Oct 2026, 08:00 WIB

CVE-2026-116104

Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func_set_nnabla_version_decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in code injection. The atta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T01:00:15.928Z. Updated 2026-10-26T01:00:15.928Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 08:00 WIB

Official record

MedPublished 26 Oct 2026, 07:45 WIB

CVE-2026-116103

Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to launch the attack remotely.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:45:29.142Z. Updated 2026-10-26T00:45:29.142Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 07:45 WIB

Official record

MedPublished 26 Oct 2026, 07:30 WIB

CVE-2026-116102

QuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the file docker_executor.py. This manipulation of the argument project_name causes os command injection. It is possible to initiate the attack remotely.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:30:20.752Z. Updated 2026-10-26T16:37:59.373Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 23:37 WIB

Official record

MedPublished 26 Oct 2026, 07:15 WIB

CVE-2026-116101

itsourcecode Online Cake Ordering System deletetransac.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:15:20.141Z. Updated 2026-10-26T00:15:20.141Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 07:15 WIB

Official record

MedPublished 26 Oct 2026, 07:00 WIB

CVE-2026-116100

gougucms User Level Level.php add cross site scripting

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:24.725Z. Updated 2026-10-26T00:00:24.725Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 07:00 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-104591

CVE-2026-104591

libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T18:44:30.492Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 01:44 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-104592

CVE-2026-104592

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T18:46:16.490Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 01:46 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-104593

CVE-2026-104593

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allows a remote attacker to cause a denial of service.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T18:54:54.180Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 01:54 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-104594

CVE-2026-104594

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T18:57:32.666Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 01:57 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-104596

CVE-2026-104596

libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c. This allows a remote attacker to obtain sensitive information.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T19:19:15.691Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:19 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-104597

CVE-2026-104597

libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T19:24:14.234Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:24 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-104598

CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T19:27:08.390Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:27 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-106676

CVE-2026-106676

qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity to a negative value. The order creation flow does not validate the resulting quantity and passes it to the stock update query, increasing inventory and creating negative-value orde…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T16:52:04.187Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Oct 2026, 23:52 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-106677

CVE-2026-106677

Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated user can view conversations, read messages, send messages, and mark messages as read for arbitrary conversation ids because the service does not verify that the caller is a conversation participant.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T16:37:22.488Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Oct 2026, 23:37 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-106781

CVE-2026-106781

An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T14:35:58.586Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Oct 2026, 21:35 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-107080

CVE-2026-107080

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T15:32:56.608Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Oct 2026, 22:32 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-107090

CVE-2026-107090

An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution logic

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T15:02:42.761Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Oct 2026, 22:02 WIB

Official record

UnscoredPublished 26 Oct 2026, 07:00 WIB

CVE-2026-107091

CVE-2026-107091

An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver installer DLL-loading logic

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T00:00:00.000Z. Updated 2026-10-26T16:07:02.329Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Oct 2026, 23:07 WIB

Official record