Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 2481–2500 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

MedPublished 16 Apr 2026, 11:54 WIB

CVE-2026-22616

CVE-2026-22616

Eaton Intelligent Power Protector (IPP) software allows repeated authentication attempts against the web interface login page due to insufficient rate‑limiting controls. This security issue has been fixed in the latest version of Eaton IPP which is available on the Eaton download centre.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T04:54:48.148Z. Updated 2026-04-16T13:30:12.024Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 20:30 WIB

Official record

MedPublished 16 Apr 2026, 11:45 WIB

CVE-2026-22615

CVE-2026-22615

Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the local system to inject malicious code resulting in arbitrary command execution. This security issue has been fixed in the latest version of Eaton IPP softwar…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 2481 to 2500 of 5813.First page Next page

Published 2026-04-16T04:45:58.055Z. Updated 2026-04-16T12:59:58.829Z.

CVSS6v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 19:59 WIB

Official record

HighPublished 16 Apr 2026, 11:40 WIB

CVE-2023-3634

Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions

In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T04:40:29.960Z. Updated 2026-04-16T13:51:55.114Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 20:51 WIB

Official record

MedPublished 16 Apr 2026, 11:19 WIB

CVE-2026-40118

CVE-2026-40118

UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing information disclosure.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T04:19:27.326Z. Updated 2026-04-16T13:00:56.282Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated16 Apr 2026, 20:00 WIB

Official record

MedPublished 16 Apr 2026, 10:36 WIB

CVE-2026-5070

Vantage <= 1.20.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Block Text Content

The Vantage theme for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery block text content in versions up to, and including, 1.20.32 due to insufficient output escaping in the gallery template. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T03:36:36.878Z. Updated 2026-04-16T14:16:34.761Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 21:16 WIB

Official record

MedPublished 16 Apr 2026, 10:36 WIB

CVE-2026-3878

WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'

The WP Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdocs_options[icon_size]' parameter in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T03:36:36.430Z. Updated 2026-04-16T13:44:27.331Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 20:44 WIB

Official record

MedPublished 16 Apr 2026, 10:36 WIB

CVE-2026-4032

CodeColorer <= 0.10.1 - Unauthenticated Stored Cross-Site Scripting via 'class' attribute in 'cc' Comment Shortcode

The CodeColorer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter in 'cc' comment shortcode in versions up to, and including, 0.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T03:36:35.757Z. Updated 2026-04-16T13:01:34.884Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 20:01 WIB

Official record

HighPublished 16 Apr 2026, 09:39 WIB

CVE-2026-6351

Openfind｜MailGates/MailAudit - CRLF Injection

MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T02:39:02.015Z. Updated 2026-04-16T13:02:24.951Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated16 Apr 2026, 20:02 WIB

Official record

HighPublished 16 Apr 2026, 09:35 WIB

CVE-2026-41015

CVE-2026-41015

radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release), the date range for the vulnerable code was less than a week, occurring after 6.1.2 but before 6.1.3.

Excerpt language: en.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T02:35:47.196Z. Updated 2026-04-16T13:15:26.207Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 20:15 WIB

Official record

CritPublished 16 Apr 2026, 09:30 WIB

CVE-2026-6350

Openfind｜MailGates/MailAudit - Stack-based Buffer Overflow

MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T02:30:17.942Z. Updated 2026-04-16T13:16:52.215Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated16 Apr 2026, 20:16 WIB

Official record

MedPublished 16 Apr 2026, 09:25 WIB

CVE-2026-3885

WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via su_box Shortcode

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_box' shortcode in all versions up to, and including, 7.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T02:25:17.471Z. Updated 2026-08-14T19:06:14.574Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated15 Aug 2026, 02:06 WIB

Official record

CritPublished 16 Apr 2026, 09:24 WIB

CVE-2026-6349

HGiga｜iSherlock - OS Command Injection

The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T02:24:45.258Z. Updated 2026-04-24T07:23:51.324Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated24 Apr 2026, 14:23 WIB

Official record

MedPublished 16 Apr 2026, 09:02 WIB

CVE-2026-3428

CVE-2026-3428

A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use (TOC-TOU) during the update process, where an unexpected payload is substituted for a legitimate…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T02:02:41.534Z. Updated 2026-04-16T12:31:27.657Z.

CVSS5.4v4.0KEVNot listedEPSSPresentUpdated16 Apr 2026, 19:31 WIB

Official record

MedPublished 16 Apr 2026, 09:00 WIB

CVE-2026-1880

CVE-2026-1880

An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of required execution resources during the validation phase, permitting a local user to make unprivileged modifications. This allows the altered resource to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T02:00:36.112Z. Updated 2026-09-17T08:31:23.922Z.

CVSS5.4v4.0KEVNot listedEPSSPresentUpdated17 Sep 2026, 15:31 WIB

Official record

CritPublished 16 Apr 2026, 08:53 WIB

CVE-2026-6348

Simopro Technology｜WinMatrix - Missing Authentication

WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine as well as on all hosts within the environment where the agent is installed.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T01:53:07.148Z. Updated 2026-04-16T12:31:42.790Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated16 Apr 2026, 19:31 WIB

Official record

MedPublished 16 Apr 2026, 08:33 WIB

CVE-2026-40962

CVE-2026-40962

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T01:33:37.018Z. Updated 2026-04-16T12:31:48.767Z.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 19:31 WIB

Official record

MedPublished 16 Apr 2026, 08:24 WIB

CVE-2026-3299

WP YouTube Lyte <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via lyte Shortcode

The WP YouTube Lyte plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lyte' shortcode in all versions up to, and including, 1.7.29 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T01:24:34.807Z. Updated 2026-04-16T13:42:32.504Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 20:42 WIB

Official record

MedPublished 16 Apr 2026, 08:20 WIB

CVE-2026-40505

MuPDF < 1.27 mutool ANSI Injection via Metadata

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running mutool info, enabling them…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T01:20:08.397Z. Updated 2026-07-14T20:00:27.664Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 03:00 WIB

Official record

CritPublished 16 Apr 2026, 08:10 WIB

CVE-2026-40504

Creolabs Gravity < 0.9.6 Heap Buffer Overflow via gravity_vm_exec

Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by crafting scripts with many string literals at global scope. Attackers can exploit insufficient bounds checking in gravity_fiber_reassign() to corrupt heap me…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T01:10:27.364Z. Updated 2026-07-14T20:00:26.952Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 03:00 WIB

Official record

HighPublished 16 Apr 2026, 07:54 WIB

CVE-2026-40960

CVE-2026-40960

Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least one mod is listed as secure.trusted_mods or secure.http_mods, then a crafted mod can intercept the request for the insecure environment or HTTP API, and also receive access to it.

Excerpt language: en.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-16T00:54:45.935Z. Updated 2026-04-16T12:31:57.082Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 19:31 WIB

Official record