Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 2581–2600 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

MedPublished 16 Apr 2026, 01:58 WIB

CVE-2026-40915

Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful exploita…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:58:52.059Z. Updated 2026-04-28T17:38:22.042Z.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated29 Apr 2026, 00:38 WIB

Official record

LowPublished 16 Apr 2026, 01:57 WIB

CVE-2026-21727

Grafana Correlations: Cross-Tenant Data Disclosure and Permanent Deletion via Legacy org_id=0 Record

A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecting legacy correlation records. Due to a backward compatibility condition allowing org_id = 0 records to be returned across organizations, a user with datasource management privileges could read and permanently delete legacy correl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2581 to 2600 of 5813.First page Next page

Severity low: primary CNA CVSS 3.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:57:25.185Z. Updated 2026-08-27T17:22:44.594Z.

CVSS3.3v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 00:22 WIB

Official record

CritPublished 16 Apr 2026, 01:43 WIB

CVE-2026-5189

Nexus Repository 3 - Hardcoded Credential in Internal Database Component

CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorized read/write access to the internal database and execute arbitrary OS commands as the Nexus process user. Exploitation requires the non-defa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:43:32.166Z. Updated 2026-04-16T10:01:24.305Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated16 Apr 2026, 17:01 WIB

Official record

HighPublished 16 Apr 2026, 01:43 WIB

CVE-2026-33667

OpenProject: 2FA OTP Verification Missing Rate Limiting

OpenProject is an open-source project management application. In versions prior to 17.3.0, 2FA OTP verification in the confirm_otp action of the two_factor_authentication module has no rate limiting, lockout mechanism, or failed-attempt tracking. The existing brute_force_block_after_failed_logins setting only counts pa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:43:14.130Z. Updated 2026-04-15T20:00:14.503Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 03:00 WIB

Official record

MedPublished 16 Apr 2026, 01:36 WIB

CVE-2026-40256

Weblate: Prefix-Based Repository Boundary Check Bypass via Symlink/Junction Path Prefix Collision

Weblate is a web based localization tool. In versions prior to 5.17, repository-boundary validation relies on string prefix checks on resolved absolute paths. In multiple code paths, the check uses startswith against the repository root path. This is not path-segment aware and can be bypassed when the external path sha…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:36:44.975Z. Updated 2026-04-16T14:11:15.386Z.

CVSS5v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 21:11 WIB

Official record

HighPublished 16 Apr 2026, 01:35 WIB

CVE-2026-34632

Photoshop Installer | CWE-427: Uncontrolled Search Path Element

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:35:52.192Z. Updated 2026-07-20T18:03:06.223Z.

CVSS8.6v3.1KEVNot listedEPSSPresentUpdated21 Jul 2026, 01:03 WIB

Official record

MedPublished 16 Apr 2026, 01:35 WIB

CVE-2026-6245

Sssd: out-of-bounds read in the sssd

A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an out-of-bounds read …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:35:19.401Z. Updated 2026-09-01T11:44:56.951Z.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 18:44 WIB

Official record

MedPublished 16 Apr 2026, 01:26 WIB

CVE-2026-39845

Weblate: SSRF via the webhook add-on using unprotected fetch_url()

Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:26:51.706Z. Updated 2026-04-15T20:01:56.793Z.

CVSS4.1v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 03:01 WIB

Official record

HighPublished 16 Apr 2026, 01:24 WIB

CVE-2026-34393

Weblate: Privilege escalation in the user API endpoint

Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the scope of edits. This issue has been fixed in version 5.17.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:24:30.813Z. Updated 2026-04-15T18:38:53.920Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 01:38 WIB

Official record

MedPublished 16 Apr 2026, 01:22 WIB

CVE-2026-34244

Weblate: SSRF via Project-Level Machinery Configuration

Weblate is a web based localization tool. In versions prior to 5.17, a user with the project.edit permission (granted by the per-project "Administration" role) can configure machine translation service URLs pointing to arbitrary internal network addresses. During configuration validation, Weblate makes an HTTP request …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:22:42.551Z. Updated 2026-04-15T18:50:10.569Z.

CVSS5v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 01:50 WIB

Official record

MedPublished 16 Apr 2026, 01:22 WIB

CVE-2026-6383

Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation

A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic. The authorization mechanism improperly truncates subresource names, leading to incorrect permission evaluations. This allows authenticated users with specific custom roles to gain unauthorized access to subresources, potentially disclosin…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:22:30.589Z. Updated 2026-04-15T18:40:31.052Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 01:40 WIB

Official record

HighPublished 16 Apr 2026, 01:19 WIB

CVE-2026-34242

Weblate: Arbitrary File Read via Symlink

Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feature didn't verify downloaded files, potentially following symlinks outside the repository. This issue has been fixed in version 5.17.

Excerpt language: en.

Severity high: primary CNA CVSS 7.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:19:59.552Z. Updated 2026-04-15T20:02:06.899Z.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 03:02 WIB

Official record

MedPublished 16 Apr 2026, 01:15 WIB

CVE-2026-33440

Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploads

Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOMAINS setting applied only to the first issued requests and didn't restrict possible redirects. This issue has been fixed in version 5.17.

Excerpt language: en.

Severity medium: primary CNA CVSS 5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:15:12.560Z. Updated 2026-04-15T18:49:25.077Z.

CVSS5v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 01:49 WIB

Official record

HighPublished 16 Apr 2026, 01:13 WIB

CVE-2026-33435

Weblate: Remote code execution during backup restoration

Weblate is a web based localization tool. In versions prior to 5.17, the project backup didn't filter Git and Mercurial configuration files which could lead to remote code execution under certain circumstances. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can limit the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:13:07.568Z. Updated 2026-04-15T18:40:27.204Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 01:40 WIB

Official record

HighPublished 16 Apr 2026, 01:08 WIB

CVE-2026-4857

SailPoint IdentityIQ Debug UI Incorrect Authorization

IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Pages Read Only capability or any custom capability with the ViewAccessDebugPage SPRight to incorrectly create new IdentityIQ objects. Until a …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:08:45.737Z. Updated 2026-04-16T03:55:39.481Z.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 10:55 WIB

Official record

MedPublished 16 Apr 2026, 01:03 WIB

CVE-2026-33220

Weblate: JavaScript localization CDN add-on allows arbitrary local file read outside the repository

Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn't perform proper access control. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable this feature as the CDN add-on is …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T18:03:40.728Z. Updated 2026-04-16T14:10:15.340Z.

CVSS6.8v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 21:10 WIB

Official record

MedPublished 16 Apr 2026, 00:51 WIB

CVE-2026-33214

Weblate has improper access control for the translation memory API

Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn't enforce proper access control. This issue has been fixed in version 5.17. If users are unable to update immediately, they can work around this issue by blocking access to /a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T17:51:46.812Z. Updated 2026-04-15T20:02:14.057Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 03:02 WIB

Official record

LowPublished 16 Apr 2026, 00:48 WIB

CVE-2026-33212

Weblate: Improper access control for pending tasks in API

Weblate is a web based localization tool. In versions prior to 5.17, the tasks API didn't verify user access for pending tasks. This could expose logs of in-progress operations to users who don't have access to given scope. The attacker needs to brute-force the random UUID of the task, so exploiting this is unlikely wi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T17:48:17.842Z. Updated 2026-04-15T18:09:01.991Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 01:09 WIB

Official record

HighPublished 16 Apr 2026, 00:29 WIB

CVE-2026-6290

Velociraptor Query() Plugin Misapplies Permissions To Orgs

Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token. This allows an authenticated GUI user with access in one org, to use the query() plugin, in a notebook cell, to run VQL queries on other orgs which they may not have acc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T17:29:04.306Z. Updated 2026-04-16T03:55:38.112Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 10:55 WIB

Official record

HighPublished 16 Apr 2026, 00:26 WIB

CVE-2026-32631

Git for Windows: `git clone` from manipulated repositories can leak NTLM hashes to arbitrary servers

Git for Windows is the Windows port of Git. Versions prior to 2.53.0.windows.3 do not have protections that prevent attackers from obtaining a user's NTLM hash. The NTLM hash can be obtained by tricking users into cloning a malicious repository, or checking out a malicious branch, that accesses an attacker-controlled s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-15T17:26:44.154Z. Updated 2026-04-15T18:44:04.155Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated16 Apr 2026, 01:44 WIB

Official record