Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 241–260 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

MedPublished 31 Aug 2026, 11:30 WIB

CVE-2026-82615

itsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find_phone sql injection

A vulnerability has been found in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function Customer::find_phone of the file /passwordrecover.php of the component Password Recovery Interface. The manipulation of the argument phonenumber leads to sql injection. Remote exploitation of the attack i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T04:30:10.673Z. Updated 2026-08-31T14:46:41.746Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 21:46 WIB

Official record

MedPublished 31 Aug 2026, 11:15 WIB

CVE-2026-82614

itsourcecode Online Medicine Delivery System Product Category Filter index.php loadResultList sql injection

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The attack may be launched r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 241 to 260 of 12259.First page Next page

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T04:15:09.139Z. Updated 2026-09-01T14:54:18.936Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:54 WIB

Official record

MedPublished 31 Aug 2026, 11:00 WIB

CVE-2026-82613

itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injection

A vulnerability was detected in itsourcecode Online Medicine Delivery System 1.0. This affects the function loadResultList of the file /index.php?q=product of the component Product Search Interface. Performing a manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The expl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T04:00:10.725Z. Updated 2026-08-31T15:48:13.794Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:48 WIB

Official record

MedPublished 31 Aug 2026, 10:45 WIB

CVE-2026-82612

itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injection

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function loadResultList of the file /index.php?q=single-item of the component Product Detail Page. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotel…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T03:45:11.228Z. Updated 2026-08-31T16:30:44.328Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:30 WIB

Official record

MedPublished 31 Aug 2026, 10:30 WIB

CVE-2026-82611

itsourcecode Online Medicine Delivery System Customer Login login.php cusAuthentication sql injection

A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function Customer::cusAuthentication of the file /login.php of the component Customer Login Interface. This manipulation of the argument U_USERNAME causes sql injection. The attack can be initiated …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T03:30:11.054Z. Updated 2026-08-31T22:03:45.652Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 05:03 WIB

Official record

MedPublished 31 Aug 2026, 10:15 WIB

CVE-2026-82610

itsourcecode Online Medicine Delivery System Login login.php employeeAuthentication sql injection

A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. Affected is the function Employee::employeeAuthentication of the file /rider/login.php of the component Login Interface. The manipulation of the argument emp_email results in sql injection. It is possible to launch the attack remot…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T03:15:08.792Z. Updated 2026-08-31T14:46:04.872Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 21:46 WIB

Official record

LowPublished 31 Aug 2026, 10:09 WIB

CVE-2026-82725

AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related data

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an attacker who controls filter form parameters filter across relationships the resource author marked non-public, turning the returned rows into a boolean oracle over private related data. AshPhoenix.FilterForm resolved eve…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T03:09:25.850Z. Updated 2026-08-31T15:49:46.161Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:49 WIB

Official record

HighPublished 31 Aug 2026, 10:07 WIB

CVE-2026-82724

Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain

Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.on_mount/4 attached a handle_params hook to assign the tenant and then im…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T03:07:57.455Z. Updated 2026-08-31T15:54:49.058Z.

CVSS7.6v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:54 WIB

Official record

MedPublished 31 Aug 2026, 10:05 WIB

CVE-2026-82726

AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant

Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select the tenant an Ash application uses, or degrade the request, by sending a crafted Host header. AshPhoenix.Helpers.get_subdomain/2 stripped the root domain with String.replace(host, ~r/.?#{root_host}/, ""). The root host w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T03:05:38.612Z. Updated 2026-08-31T14:47:35.274Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 21:47 WIB

Official record

LowPublished 31 Aug 2026, 10:03 WIB

CVE-2026-82727

AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire raw submitted param map into an exception message, so secrets submitted alongside a union form field leak into logs, crash reports and the dev error page. When AshPhoenix.Form.Auto builds a union sub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T03:03:58.982Z. Updated 2026-08-31T14:49:25.154Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 21:49 WIB

Official record

MedPublished 31 Aug 2026, 10:00 WIB

CVE-2026-82609

itsourcecode Sales and Inventory System inv_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T03:00:11.609Z. Updated 2026-09-01T14:48:50.947Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:48 WIB

Official record

MedPublished 31 Aug 2026, 09:45 WIB

CVE-2026-82608

Kamailio AVP cxdx_avp.c get_4bytes out-of-bounds

A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modules/ims_registrar_scscf/cxdx_avp.c of the component AVP Handler. Executing a manipulation can lead to out-of-bounds read. The attack may be performed from remote. The exploit has been publicly disclose…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T02:45:10.036Z. Updated 2026-08-31T15:56:47.519Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:56 WIB

Official record

HighPublished 31 Aug 2026, 09:33 WIB

CVE-2026-82673

Path traversal in AshAdmin file uploads via unsanitized client filename

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allows writing attacker-controlled bytes to arbitrary paths on the server. AshAdmin.Components.Resource.Form.consume_file_uploads/1 builds the destination as Path.join([tmp_dir, entry.client_name]) and w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T02:33:10.967Z. Updated 2026-08-31T14:50:14.728Z.

CVSS8.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 21:50 WIB

Official record

LowPublished 31 Aug 2026, 09:31 WIB

CVE-2026-81853

AshAdmin composite primary key decoding accepts arbitrary fields, enabling a secret-attribute oracle

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_admin turns a record-lookup URL into an equality oracle over sensitive attributes. AshAdmin.Helpers.decode_primary_key/2 decodes the composite-primary-key form (Base64 plus ETF) and returns the decoded map verbatim as the lookup filter, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T02:31:29.547Z. Updated 2026-08-31T15:58:40.226Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:58 WIB

Official record

MedPublished 31 Aug 2026, 09:30 WIB

CVE-2026-82607

Cozmoslabs Profile Builder Plugin Avatar Simple Upload AJAX admin-ajax.php wppb_ajax_simple_avatar unrestricted upload

A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the function wppb_ajax_simple_avatar of the file /wp-admin/admin-ajax.php of the component Avatar Simple Upload AJAX Handler. Performing a manipulation results in unrestricted upload. The attack is possible…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T02:30:09.384Z. Updated 2026-08-31T16:07:54.401Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:07 WIB

Official record

LowPublished 31 Aug 2026, 09:29 WIB

CVE-2026-81852

AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass

Use of Insufficiently Random Values vulnerability in ash-project ash_admin ships a hardcoded, publicly known CSP nonce, defeating nonce-based Content-Security-Policy protection. When mounted without :csp_nonce_assign_key, AshAdmin.Router.ash_admin/2 defaulted the img, style, and script nonces to the literal constant a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T02:29:14.304Z. Updated 2026-08-31T15:59:44.933Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:59 WIB

Official record

LowPublished 31 Aug 2026, 09:26 WIB

CVE-2026-82681

Query-parameter injection in AshAdmin row-action links via unencoded string primary keys

Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's string primary key rewrite the target of AshAdmin's row-action links. The Table, DataTable, and Show components built row-action URLs by raw string interpolation, splicing the primary key (and table,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T02:26:05.357Z. Updated 2026-08-31T16:01:32.019Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:01 WIB

Official record

HighPublished 31 Aug 2026, 09:23 WIB

CVE-2026-77850

Stored XSS in AshAdmin relationship typeahead via unescaped label_field content

Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script in an administrator's browser. The relationship typeahead components AshAdmin.Components.Resource.RelationshipField and AshAdmin.Components.Resource.ManagedRelationshipSelectField highlight the matche…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T02:23:54.129Z. Updated 2026-08-31T16:05:15.631Z.

CVSS8.4v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:05 WIB

Official record

HighPublished 31 Aug 2026, 09:22 WIB

CVE-2026-82722

AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any client that can reach the admin LiveView exhaust the BEAM atom table and crash the entire node. Two LiveView event handlers interned atoms from unvalidated client input: AshAdmin.PageLive's set_actor built modules from…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T02:22:15.099Z. Updated 2026-08-31T16:07:01.861Z.

CVSS8.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:07 WIB

Official record

HighPublished 31 Aug 2026, 09:20 WIB

CVE-2026-75757

AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies (tenant, actor_resource, actor_primar…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T02:20:17.985Z. Updated 2026-08-31T14:50:59.043Z.

CVSS8.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 21:50 WIB

Official record