Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 261–280 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

MedPublished 31 Aug 2026, 09:15 WIB

CVE-2026-82605

BareBones BBEdit Lasso Language Tokenizer infinite loop

A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The affected component should …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T02:15:09.051Z. Updated 2026-08-31T22:03:51.775Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 05:03 WIB

Official record

MedPublished 31 Aug 2026, 09:00 WIB

CVE-2026-82604

BareBones BBEdit Java Language recursion

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should upgrade the affected c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 261 to 280 of 12259.First page Next page

Published 2026-08-31T02:00:13.384Z. Updated 2026-08-31T16:10:48.833Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:10 WIB

Official record

MedPublished 31 Aug 2026, 08:45 WIB

CVE-2026-82603

SeaCMS Comment Cache member.php del_pl path traversal

A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?action=del_pl of the component Comment Cache. The manipulation of the argument itype/vid results in path traversal. The attack may be launched remotely. The exploit is now public and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T01:45:07.674Z. Updated 2026-09-01T14:47:47.888Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:47 WIB

Official record

MedPublished 31 Aug 2026, 08:30 WIB

CVE-2026-82602

SeaCMS ass.php authorization

A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /ass.php. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T01:30:09.315Z. Updated 2026-08-31T16:14:05.509Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:14 WIB

Official record

MedPublished 31 Aug 2026, 08:15 WIB

CVE-2026-82601

SeaCMS err.php cross site scripting

A weakness has been identified in SeaCMS up to 13.6. This affects an unknown part of the file /err.php. Executing a manipulation of the argument errtxt can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T01:15:07.833Z. Updated 2026-08-31T17:57:49.333Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 00:57 WIB

Official record

HighPublished 31 Aug 2026, 08:09 WIB

CVE-2026-75760

AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider request state and credentials in a user-facing validation error. In AshAi.Changes.Vectorize, when the embedding provider call fails the change added a changeset error whose message inspected the raw erro…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T01:09:59.413Z. Updated 2026-08-31T16:07:25.476Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:07 WIB

Official record

MedPublished 31 Aug 2026, 08:09 WIB

CVE-2026-82580

AshAi echoes raw tool exception messages into the conversation, disclosing internal details

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal error text to chat users. In AshAi.ToolLoop and AshAi.Tools, an exception raised while executing a tool was serialized verbatim with Exception.message/1 into the tool-result content. That content is appe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T01:09:00.192Z. Updated 2026-08-31T16:06:44.151Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:06 WIB

Official record

MedPublished 31 Aug 2026, 08:07 WIB

CVE-2026-82579

AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service

Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can influence a model's output to hang the tool loop and drive unbounded, repeated model requests. AshAi.ToolLoop classifies a model response of :tool_calls, then filters the calls through normalize_tool_cal…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T01:07:49.185Z. Updated 2026-08-31T16:05:58.542Z.

CVSS6v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:05 WIB

Official record

HighPublished 31 Aug 2026, 08:06 WIB

CVE-2026-82564

Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records

Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller of an identity-configured tool to update or destroy records it never identified, including every row in the table. In AshAi.Tool.Execution, identity_filter/3 built the update/destroy filter directly from the raw tool a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T01:06:00.526Z. Updated 2026-09-01T17:18:18.459Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated02 Sep 2026, 00:18 WIB

Official record

MedPublished 31 Aug 2026, 08:00 WIB

CVE-2026-82600

SeaCMS zyapi.php sql injection

A security flaw has been discovered in SeaCMS up to 13.6. Affected by this issue is some unknown functionality of the file /zyapi.php?ac=videolist. Performing a manipulation of the argument ids results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used fo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T01:00:13.381Z. Updated 2026-08-31T22:03:58.048Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 05:03 WIB

Official record

HighPublished 31 Aug 2026, 07:57 WIB

CVE-2026-81315

MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header

Origin Validation Error vulnerability in ash-project ash_ai allows a malicious web page to bypass the MCP server's DNS-rebinding protection and issue cross-site requests to a user's local MCP server with that user's actor. In AshAi.Mcp.Server, with the default allowed_origins: nil, origin_allowed?/3 accepts an origin …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T00:57:55.910Z. Updated 2026-08-31T16:02:38.700Z.

CVSS7.4v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:02 WIB

Official record

HighPublished 31 Aug 2026, 07:56 WIB

CVE-2026-77956

EEx template evaluation of prompt content in AshAi enables remote code execution

Improper Control of Generation of Code (Code Injection) vulnerability in ash-project ash_ai allows a remote, unauthenticated client to execute arbitrary Elixir code. AshAi.Actions.Prompt evaluates prompt content through EEx.eval_string/2. The documented prompt: fn input, context -> ... end form lets the prompt content…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T00:56:26.440Z. Updated 2026-08-31T16:01:41.879Z.

CVSS8.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:01 WIB

Official record

MedPublished 31 Aug 2026, 07:45 WIB

CVE-2026-82599

SeaCMS Avatar Upload member.php unlink path traversal

A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the function unlink of the file /member.php?action=chgpwdsubmit of the component Avatar Upload. Such manipulation of the argument oldpic leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T00:45:08.847Z. Updated 2026-08-31T16:11:27.010Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:11 WIB

Official record

MedPublished 31 Aug 2026, 07:30 WIB

CVE-2026-82598

SeaCMS Template search.php parseIf code injection

A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the component Template Engine. This manipulation of the argument searchtype causes code injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T00:30:07.314Z. Updated 2026-09-01T14:46:26.611Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:46 WIB

Official record

MedPublished 31 Aug 2026, 07:15 WIB

CVE-2026-82597

TOTOLINK NR1800X cstecgi.cgi setUssd command injection

A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the function setUssd of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ussd leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T00:15:09.430Z. Updated 2026-08-31T16:17:17.305Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:17 WIB

Official record

MedPublished 31 Aug 2026, 07:00 WIB

CVE-2026-82596

LatencyUtils PauseDetector LatencyStats.java LatencyStats.recordDetectedPause memory corruption

A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function LatencyStats.recordDetectedPause of the file src/main/java/org/LatencyUtils/LatencyStats.java of the component PauseDetector. Executing a manipulation can lead to memory corruption. The attack needs to be launched locally…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T00:00:13.491Z. Updated 2026-08-31T17:43:07.243Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 00:43 WIB

Official record

UnscoredPublished 31 Aug 2026, 07:00 WIB

CVE-2025-63607

CVE-2025-63607

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter verbatim into the rendered page, permitting execution of attacker-supplied JavaScript in users browser.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T00:00:00.000Z. Updated 2026-09-01T14:08:39.940Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:08 WIB

Official record

UnscoredPublished 31 Aug 2026, 07:00 WIB

CVE-2026-38577

CVE-2026-38577

Insecure hardcoded credentials in the Admin account of Tenda HG21 V4.0.0-260302 allows attackers to gain root access.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T00:00:00.000Z. Updated 2026-09-01T14:40:41.208Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:40 WIB

Official record

UnscoredPublished 31 Aug 2026, 07:00 WIB

CVE-2026-51152

CVE-2026-51152

Server-side request forgery (SSRF) in the /har/test endpoint in QD 20220208 through 20250803. Fetcher.build_request() in libs/fetcher.py constructs an httpclient.HTTPRequest from user-supplied JSON without validating URL scheme, host, or IP range. The /har/test handler does not require authentication, enabling unauthen…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T00:00:00.000Z. Updated 2026-09-01T13:56:39.553Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Sep 2026, 20:56 WIB

Official record

UnscoredPublished 31 Aug 2026, 07:00 WIB

CVE-2026-51153

CVE-2026-51153

Stored Cross-Site Scripting (XSS) in TaskRunHandler.post() in web/handlers/task.py in QD 20220208 through 20250803. When a task is run via /task/<taskid>/run, the handler renders task log content (logtmp) into the HTML response using Python % string formatting without HTML encoding. logtmp is populated from the excepti…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T00:00:00.000Z. Updated 2026-09-01T15:21:09.258Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Sep 2026, 22:21 WIB

Official record