Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 2421–2440 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

HighPublished 25 Aug 2026, 21:07 WIB

CVE-2026-55525

PraisonAI: SSRF via redirect-following in praisonaiagents web_crawl

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the web_crawl function validates only the initial URL before _crawl_with_httpx uses httpx.Client(follow_redirects=True). Redirect targets are not revalidated, so an attacker who influences a crawl target can redirect a public URL to loopback, pri…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T14:07:08.551Z. Updated 2026-08-25T16:14:41.881Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated25 Aug 2026, 23:14 WIB

Official record

HighPublished 25 Aug 2026, 20:49 WIB

CVE-2026-79655

Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink targets are not properly vali…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2421 to 2440 of 12259.First page Next page

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T13:49:37.593Z. Updated 2026-10-06T07:33:16.935Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Oct 2026, 14:33 WIB

Official record

MedPublished 25 Aug 2026, 20:30 WIB

CVE-2026-79623

FishCodeTech Muteki Default Local Worker Backend settings.json os command injection

A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T13:30:09.438Z. Updated 2026-08-27T14:35:48.228Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 21:35 WIB

Official record

MedPublished 25 Aug 2026, 20:15 WIB

CVE-2026-79622

dekdee adobe-xd-mcp file-access-from-request Endpoint xd-parser.ts path traversal

A weakness has been identified in dekdee adobe-xd-mcp 1.0.0. Impacted is an unknown function of the file src/parsers/xd-parser.ts of the component file-access-from-request Endpoint. Executing a manipulation of the argument outputFile/outputDir can lead to path traversal. It is possible to launch the attack remotely. Th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T13:15:09.282Z. Updated 2026-08-25T14:33:37.187Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:33 WIB

Official record

MedPublished 25 Aug 2026, 20:08 WIB

CVE-2026-78581

Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier to access or modify …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T13:08:11.520Z. Updated 2026-08-25T14:51:53.897Z.

CVSS4.2v3.1KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:51 WIB

Official record

UnscoredPublished 25 Aug 2026, 20:00 WIB

CVE-2026-75803

AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVP_Cipher() function. Impact summary: Applications calling EVP_Cipher() on an empty ciphertext and expecting the call to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T13:00:25.067Z. Updated 2026-09-01T18:23:06.793Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Sep 2026, 01:23 WIB

Official record

UnscoredPublished 25 Aug 2026, 20:00 WIB

CVE-2026-63076

Invalid Pointer Dereference in CMP Server via Crafted protectionAlg

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid pointer. Impact summary: A…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T13:00:11.218Z. Updated 2026-08-25T14:37:32.193Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:37 WIB

Official record

MedPublished 25 Aug 2026, 20:00 WIB

CVE-2026-79406

macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor deleted the GitHub issue…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T13:00:09.821Z. Updated 2026-08-27T15:14:14.547Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 22:14 WIB

Official record

UnscoredPublished 25 Aug 2026, 20:00 WIB

CVE-2026-63075

QUIC ACK-only Packet Retention Can Cause Memory Exhaustion

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC handshake can cause connec…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T13:00:04.752Z. Updated 2026-08-25T14:36:51.928Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:36 WIB

Official record

UnscoredPublished 25 Aug 2026, 19:59 WIB

CVE-2026-63074

CMP Indefinite Cache Growth of ExtraCerts

Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they are invalid). If a server reuses an OSSL_CMP_CTX frequently, this cache of extraCerts may grow unboundedly, and a malicious client may flood …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:59:58.278Z. Updated 2026-08-25T14:36:13.170Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:36 WIB

Official record

UnscoredPublished 25 Aug 2026, 19:59 WIB

CVE-2026-63073

Untrusted Sender DN Used as Format String in CMP Response Validation

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to `ERR_raise_data()`. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate whose subject b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:59:43.356Z. Updated 2026-08-31T19:12:54.136Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Sep 2026, 02:12 WIB

Official record

UnscoredPublished 25 Aug 2026, 19:59 WIB

CVE-2026-63072

Heap Buffer Overflow in CMS Key Unwrapping

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a crafted CMS message c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:59:34.428Z. Updated 2026-08-25T14:29:55.378Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:29 WIB

Official record

UnscoredPublished 25 Aug 2026, 19:59 WIB

CVE-2026-54874

Excessive Memory Use Buffering DTLS Records for a Future Epoch

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large amount of memory, whic…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:59:17.912Z. Updated 2026-08-25T14:28:37.339Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:28 WIB

Official record

UnscoredPublished 25 Aug 2026, 19:59 WIB

CVE-2026-18798

QUIC Server May Trigger Double Free When Processing INITIAL Packet

Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidence that this double f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:59:04.715Z. Updated 2026-08-25T14:15:04.879Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:15 WIB

Official record

UnscoredPublished 25 Aug 2026, 19:58 WIB

CVE-2026-14457

RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:58:29.349Z. Updated 2026-08-25T14:13:27.811Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:13 WIB

Official record

HighPublished 25 Aug 2026, 19:52 WIB

CVE-2026-57863

Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint

Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended extraction directory by supplying crafted ZIP archives with ../ sequences to the unzip endpoint. Attackers can exploit unsanitized ZIP entry …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:52:11.549Z. Updated 2026-10-01T15:20:05.980Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:20 WIB

Official record

CritPublished 25 Aug 2026, 19:50 WIB

CVE-2026-77998

Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4

Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4 - This is due to the mo_saml_validate_signature() function performing a lo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:50:46.506Z. Updated 2026-09-08T10:38:41.779Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated08 Sep 2026, 17:38 WIB

Official record

MedPublished 25 Aug 2026, 19:45 WIB

CVE-2026-78887

liketrek TREK Journey Photo Proxy validateShareTokenForAsset authorization

A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:45:10.723Z. Updated 2026-08-25T17:59:31.339Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated26 Aug 2026, 00:59 WIB

Official record

MedPublished 25 Aug 2026, 19:30 WIB

CVE-2026-78886

liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated remotely. The attack's comple…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:30:09.424Z. Updated 2026-08-25T13:13:00.971Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 20:13 WIB

Official record

MedPublished 25 Aug 2026, 19:15 WIB

CVE-2026-78885

liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The attack requires a high l…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-25T12:15:08.513Z. Updated 2026-08-27T14:35:57.758Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 21:35 WIB

Official record