Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 17 KEV · 15,829 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 17
With a forecast: 15,829
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.11% · forecast 98% · unscored 22%.

Showing 261–280 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

MedPublished 29 Oct 2026, 19:33 WIB

CVE-2026-93008

Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations

A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME target without checking that those records belong to the responding server's authorized zone. In split-DNS deployments that send some domains to a specific upstream, an attacker who controls that upstream…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T12:33:22.941Z. Updated 2026-10-29T12:33:22.941Z.

CVSS6.8v3.1KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 19:33 WIB

Official record

HighPublished 29 Oct 2026, 18:36 WIB

CVE-2026-119028

oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values

oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying non-literal enum entries in integer, number, or boolean schemas. Attackers controlling an OpenAPI document can craft an enum entry that closes the const block in constants.tmpl and injects a func…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 261 to 280 of 16156.First page Next page

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:36:34.692Z. Updated 2026-10-29T14:08:24.785Z.

CVSS8.7v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 21:08 WIB

Official record

HighPublished 29 Oct 2026, 18:36 WIB

CVE-2026-119027

oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extension

oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying a crafted servers[].x-go-name value emitted unescaped by the server-urls template. Attackers who control an OpenAPI document can define an injected func init() that executes when the victim build…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:36:34.029Z. Updated 2026-10-29T11:36:34.029Z.

CVSS7.7v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 18:36 WIB

Official record

HighPublished 29 Oct 2026, 18:34 WIB

CVE-2026-109822

CVE-2026-109822

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive information. Configuration files generated by the CONFIG file export function may be read by an unauthenticated attacker.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:34:08.429Z. Updated 2026-10-29T12:36:50.215Z.

CVSS7.1v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 19:36 WIB

Official record

CritPublished 29 Oct 2026, 18:33 WIB

CVE-2026-97854

CVE-2026-97854

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:33:51.649Z. Updated 2026-10-29T12:36:50.361Z.

CVSS9.3v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 19:36 WIB

Official record

HighPublished 29 Oct 2026, 18:33 WIB

CVE-2026-103665

CVE-2026-103665

The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with administrative privileges.

Excerpt language: en.

Severity high: primary CNA CVSS 8.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:33:30.885Z. Updated 2026-10-29T14:10:50.402Z.

CVSS8.4v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 21:10 WIB

Official record

HighPublished 29 Oct 2026, 18:33 WIB

CVE-2026-97860

CVE-2026-97860

YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges.

Excerpt language: en.

Severity high: primary CNA CVSS 8.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:33:10.955Z. Updated 2026-10-29T14:12:18.004Z.

CVSS8.4v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 21:12 WIB

Official record

MedPublished 29 Oct 2026, 18:28 WIB

CVE-2026-27401

WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.62.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.62.0.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:28:05.240Z. Updated 2026-10-29T12:36:50.510Z.

CVSS5.3v3.1KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 19:36 WIB

Official record

HighPublished 29 Oct 2026, 18:27 WIB

CVE-2026-115821

NewsmanApp <= 3.7.29 - Unauthenticated Stored Cross-Site Scripting via 'billing_first_name' and 'billing_last_name' Parameters

The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_first_name, billing_last_name' parameter in all versions up to, and including, 3.7.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:27:15.965Z. Updated 2026-10-29T12:36:50.654Z.

CVSS7.2v3.1KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 19:36 WIB

Official record

HighPublished 29 Oct 2026, 18:27 WIB

CVE-2026-110184

Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via 'slug' Parameter

The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to ap…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:27:15.602Z. Updated 2026-10-29T12:36:50.798Z.

CVSS7.5v3.1KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 19:36 WIB

Official record

MedPublished 29 Oct 2026, 18:27 WIB

CVE-2026-92086

MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameter

The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.7 via the 'post_id' parameter. This makes it possible for unauthenticated attackers to extract personally identifiable information from other users' form inquiry records, including submitted nam…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:27:15.236Z. Updated 2026-10-29T12:36:50.947Z.

CVSS5.3v3.1KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 19:36 WIB

Official record

MedPublished 29 Oct 2026, 18:27 WIB

CVE-2026-109216

Meta Box <= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keys

The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'profile_background[<attacker-chosen key>]' parameter in all versions up to, and including, 5.15.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticate…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:27:14.853Z. Updated 2026-10-29T12:36:51.108Z.

CVSS4.9v3.1KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 19:36 WIB

Official record

HighPublished 29 Oct 2026, 18:27 WIB

CVE-2026-96767

NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site Scripting via Content-Type Header

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in all versions up to, and including, 9.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:27:14.333Z. Updated 2026-10-29T12:36:51.254Z.

CVSS7.2v3.1KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 19:36 WIB

Official record

HighPublished 29 Oct 2026, 18:24 WIB

CVE-2026-119025

open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint values from malicious MCP servers, which execute when index.js pa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:24:18.723Z. Updated 2026-10-29T11:24:18.723Z.

CVSS7.7v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 18:24 WIB

Official record

MedPublished 29 Oct 2026, 18:17 WIB

CVE-2026-5702

Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application

Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:17:09.384Z. Updated 2026-10-29T13:07:11.657Z.

CVSS4.8v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 20:07 WIB

Official record

MedPublished 29 Oct 2026, 18:17 WIB

CVE-2026-5700

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'observaciones' in /mis-gastos endpoint.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:17:02.161Z. Updated 2026-10-29T13:07:11.804Z.

CVSS4.8v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 20:07 WIB

Official record

MedPublished 29 Oct 2026, 18:16 WIB

CVE-2026-5699

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'companyName' in /empresa endpoint;

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:16:57.467Z. Updated 2026-10-29T13:07:11.952Z.

CVSS4.8v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 20:07 WIB

Official record

MedPublished 29 Oct 2026, 18:16 WIB

CVE-2026-5698

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameters 'titulo_es' and 'add_etiquetas%5B%5D' in '…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:16:52.469Z. Updated 2026-10-29T13:07:12.103Z.

CVSS4.8v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 20:07 WIB

Official record

MedPublished 29 Oct 2026, 18:16 WIB

CVE-2026-5697

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows: parameter 'nombre' in '/usuario' endpoint;

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:16:47.555Z. Updated 2026-10-29T13:07:12.257Z.

CVSS4.8v4.0KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 20:07 WIB

Official record

HighPublished 29 Oct 2026, 18:00 WIB

CVE-2026-115611

WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through 1.0.7.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.

Published 2026-10-29T11:00:26.280Z. Updated 2026-10-29T12:36:51.406Z.

CVSS7.1v3.1KEVNot listedEPSSUnavailableUpdated29 Oct 2026, 19:36 WIB

Official record