Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 2561–2580 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

MedPublished 25 Oct 2026, 05:00 WIB

CVE-2026-115982

phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting

A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file app/tools/racks/show-rack-popup.php of the component Rack Link Creation. Performing a manipulation of the argument deviceid results in cross site scripting. Remote exploitation of the attack is possi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T22:00:13.102Z. Updated 2026-10-24T22:00:13.102Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated25 Oct 2026, 05:00 WIB

Official record

MedPublished 25 Oct 2026, 04:45 WIB

CVE-2026-115981

phpIPAM index.php cross site scripting

A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of the argument REQUEST_URI leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2561 to 2580 of 16156.First page Next page

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T21:45:07.713Z. Updated 2026-10-26T17:37:46.178Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:37 WIB

Official record

CritPublished 25 Oct 2026, 01:42 WIB

CVE-2026-114820

CVE-2026-114820

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T18:42:04.571Z. Updated 2026-10-25T03:55:32.751Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated25 Oct 2026, 10:55 WIB

Official record

MedPublished 25 Oct 2026, 01:15 WIB

CVE-2026-115973

FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery

A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The manipulation leads to weak password recovery. The attack may be initiat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T18:15:15.067Z. Updated 2026-10-29T15:25:39.467Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 22:25 WIB

Official record

MedPublished 25 Oct 2026, 01:00 WIB

CVE-2026-115972

FaveoSuite Faveo Helpdesk UnAuthController.php UnAuthController.resolve authorization

A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAuthController.resolve of the file app/Http/Controllers/Client/helpdesk/UnAuthController.php. Executing a manipulation of t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T18:00:18.162Z. Updated 2026-10-24T18:00:18.162Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated25 Oct 2026, 01:00 WIB

Official record

MedPublished 25 Oct 2026, 00:30 WIB

CVE-2026-115971

Travisun Opptrix preParsing handler webhook Buffer.concat denial of service

A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the component preParsing handler. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made public and could be used. The projec…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T17:30:17.983Z. Updated 2026-10-26T17:38:02.650Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:38 WIB

Official record

MedPublished 25 Oct 2026, 00:15 WIB

CVE-2026-115970

Travisun Opptrix Import Endpoint import code injection

A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The pr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T17:15:13.273Z. Updated 2026-10-29T15:24:32.723Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 22:24 WIB

Official record

MedPublished 24 Oct 2026, 22:30 WIB

CVE-2026-115969

Travisun Opptrix Schedule API setup command injection

A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the component Schedule API. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The project has been completely taken o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T15:30:11.184Z. Updated 2026-10-24T15:30:11.184Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Oct 2026, 22:30 WIB

Official record

CritPublished 24 Oct 2026, 21:17 WIB

CVE-2026-115933

Forged signed tokens let any registered user take over other users and organizations

Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the credentials of a browser-extension channel signed data taken from the request itself and stored the result where the requesting user can read it back. A user co…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T14:17:05.755Z. Updated 2026-10-24T14:29:17.141Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated24 Oct 2026, 21:29 WIB

Official record

CritPublished 24 Oct 2026, 21:15 WIB

CVE-2026-115557

Distrust compromised intermediate certificates in ssl module

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T14:15:14.283Z. Updated 2026-10-27T00:36:07.516Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 07:36 WIB

Official record

HighPublished 24 Oct 2026, 21:00 WIB

CVE-2026-114191

WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPI QR Code Payment Gateway for WooCommerce: from n/a through 1.6.3.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T14:00:09.573Z. Updated 2026-10-24T14:46:58.028Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated24 Oct 2026, 21:46 WIB

Official record

HighPublished 24 Oct 2026, 21:00 WIB

CVE-2026-114704

WordPress Relevanssi plugin <= 4.28.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object Injection.This issue affects Relevanssi : from n/a through 4.28.4.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T14:00:09.045Z. Updated 2026-10-24T14:46:58.175Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated24 Oct 2026, 21:46 WIB

Official record

MedPublished 24 Oct 2026, 21:00 WIB

CVE-2026-114192

WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through 5.7.8.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T14:00:09.029Z. Updated 2026-10-24T14:46:58.324Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated24 Oct 2026, 21:46 WIB

Official record

UnscoredPublished 24 Oct 2026, 20:50 WIB

CVE-2026-114629

Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters

Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters. Web::Dispatch::ParamParser::get_unpacked_body_from reads an application/x-www-form-urlencoded body using a single read call, with no cap and the return value ignored. Perl's read grows the bu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T13:50:47.616Z. Updated 2026-10-24T16:06:39.380Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Oct 2026, 23:06 WIB

Official record

CritPublished 24 Oct 2026, 19:28 WIB

CVE-2026-115932

Path traversal in post media lets any registered user read server files

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered user can store a crafted media path with a post, get it past the checks that normally restrict it, and have the publishing wor…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T12:28:36.033Z. Updated 2026-10-24T14:18:20.861Z.

CVSS9.6v3.1KEVNot listedEPSSPresentUpdated24 Oct 2026, 21:18 WIB

Official record

MedPublished 24 Oct 2026, 18:40 WIB

CVE-2026-116020

BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages

BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authenticated users to access other users' draft page attachments by ID. Attackers with attachment permissions can enumerate sequential attachment IDs to download, rename, relink, or replace files on another u…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T11:40:36.328Z. Updated 2026-10-24T11:40:36.328Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated24 Oct 2026, 18:40 WIB

Official record

HighPublished 24 Oct 2026, 18:40 WIB

CVE-2026-116019

Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives

Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public static methods by relocating data-*@ directives with unset-name@ or integer keys. Attackers with page-edit permission can embed crafted fields in Flex form overrides in page frontmatter to call metho…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T11:40:35.632Z. Updated 2026-10-26T17:39:42.999Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:39 WIB

Official record

MedPublished 24 Oct 2026, 18:40 WIB

CVE-2026-116018

ONEARMY community-platform before 2.165.2 IDOR via notification read endpoint

ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated users to mark other users' notifications as read via POST /api/notifications/:id/read. Attackers can iterate sequential notification IDs to suppress unread indicators of users in the same tenan…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T11:40:34.948Z. Updated 2026-10-29T15:23:13.164Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 22:23 WIB

Official record

MedPublished 24 Oct 2026, 18:40 WIB

CVE-2026-116017

Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint

Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceController.getAddressBook handler that allows authenticated users to read other users' device address books. Attackers with a normal or self-registered account can request /device/address-book/{macAddre…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T11:40:34.247Z. Updated 2026-10-24T11:40:34.247Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated24 Oct 2026, 18:40 WIB

Official record

HighPublished 24 Oct 2026, 18:40 WIB

CVE-2026-116016

yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header

yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-level data scope restrictions by sending a data-permission-enable header set to false. Attackers can add this header to /admin-api requests, which DataPermissionRpcWebFilter trusts, to read or modify …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-24T11:40:33.600Z. Updated 2026-10-24T11:40:33.600Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated24 Oct 2026, 18:40 WIB

Official record