Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 2741–2760 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

CritPublished 24 Aug 2026, 23:11 WIB

CVE-2026-77915

rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php

rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes() call in routes/web.php that re-enables the POST /register route after it was explicitly disabled. Att…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T16:11:44.667Z. Updated 2026-10-01T15:21:15.632Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:21 WIB

Official record

UnscoredPublished 24 Aug 2026, 23:11 WIB

CVE-2026-60093

Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir

Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to the local filesyst…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2741 to 2760 of 12259.First page Next page

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T16:11:23.500Z. Updated 2026-08-25T19:36:10.880Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:36 WIB

Official record

UnscoredPublished 24 Aug 2026, 23:09 WIB

CVE-2026-59230

Apache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled

Improper input validation vulnerability in Apache Camel. This issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-mail component ships a MimeMultipart data format that can unmarshal a MIME multipart message. When it is configured with headersInlin…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T16:09:44.229Z. Updated 2026-08-25T19:35:08.113Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:35 WIB

Official record

HighPublished 24 Aug 2026, 23:07 WIB

CVE-2026-77914

rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal sequences to escape the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T16:07:58.448Z. Updated 2026-10-01T15:21:14.965Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:21 WIB

Official record

HighPublished 24 Aug 2026, 23:07 WIB

CVE-2026-18349

SAMA5D44 Fault Injection Vulnerability

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T16:07:45.500Z. Updated 2026-10-27T16:40:02.564Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:40 WIB

Official record

HighPublished 24 Aug 2026, 23:01 WIB

CVE-2026-12556

HP Easy Start for macOS - Security Update

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.

Excerpt language: en.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T16:01:58.193Z. Updated 2026-09-03T15:17:21.554Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated03 Sep 2026, 22:17 WIB

Official record

HighPublished 24 Aug 2026, 23:00 WIB

CVE-2026-12555

HP Easy Start for macOS - Security Update

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.

Excerpt language: en.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T16:00:23.156Z. Updated 2026-09-03T15:13:15.889Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated03 Sep 2026, 22:13 WIB

Official record

HighPublished 24 Aug 2026, 22:58 WIB

CVE-2026-12554

HP Easy Start for macOS - Security Update

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.

Excerpt language: en.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:58:29.333Z. Updated 2026-09-03T15:16:52.890Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated03 Sep 2026, 22:16 WIB

Official record

HighPublished 24 Aug 2026, 22:43 WIB

CVE-2026-13212

Zephyr virtio driver calls an arbitrary function pointer from an out-of-range used-ring descriptor id

The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In virtio_isr() (drivers/virtio/virtio_common.c), the device-written vq->used->ring[idx].id is used directly as an index into vq->recv_cbs[] and vq->desc[], which are both allocated with exactly vq-…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:43:37.762Z. Updated 2026-08-24T20:19:35.081Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated25 Aug 2026, 03:19 WIB

Official record

MedPublished 24 Aug 2026, 22:43 WIB

CVE-2026-13343

Uninitialised stack memory disclosure in the MIDI 2.0 UMP Stream responder

The UMP Stream responder library in lib/midi2/ump_stream_responder.c builds reply packets in a 16-byte struct midi_ump (uint32_t data[4]). The builders make_endpoint_info() and make_function_block_info() populate only the first two words (res.data[0] and res.data[1]) and, before this fix, declared their result as an un…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:43:36.665Z. Updated 2026-08-24T20:20:44.618Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated25 Aug 2026, 03:20 WIB

Official record

HighPublished 24 Aug 2026, 22:42 WIB

CVE-2026-71366

Awx: notification backends allow ssrf and credential leakage

A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends. The webhook, Mattermost, Rocket.Chat, and Grafana notification backends use notification template URLs as direct HTTP request targets without validating the target address against private, loopback, or reserved IP ranges…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:42:44.869Z. Updated 2026-08-26T18:26:31.611Z.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 01:26 WIB

Official record

CritPublished 24 Aug 2026, 22:42 WIB

CVE-2026-76071

Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf conversions that copy …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:42:33.056Z. Updated 2026-08-26T18:25:12.168Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 01:25 WIB

Official record

CritPublished 24 Aug 2026, 22:41 WIB

CVE-2026-76070

Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base64 decoder's lack of ou…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:41:16.908Z. Updated 2026-08-24T18:28:13.077Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 01:28 WIB

Official record

HighPublished 24 Aug 2026, 22:37 WIB

CVE-2025-68825

HCL Hive is affected by incorrect default permissions

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:37:00.819Z. Updated 2026-08-24T20:22:57.951Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated25 Aug 2026, 03:22 WIB

Official record

HighPublished 24 Aug 2026, 22:36 WIB

CVE-2026-78416

Authenticated RCE via `condition.config` JSON cleanse bypass

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interpreted after decoding, enabl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:36:07.971Z. Updated 2026-08-26T20:59:03.683Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 03:59 WIB

Official record

MedPublished 24 Aug 2026, 22:33 WIB

CVE-2026-67204

BookStack < 26.05.4 Broken Access Control via Image Gallery API

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a user avatar's ID to the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:33:13.649Z. Updated 2026-10-01T15:20:17.762Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:20 WIB

Official record

HighPublished 24 Aug 2026, 22:21 WIB

CVE-2026-71364

Awx: project archive extraction allows path traversal file writes

A path traversal vulnerability was found in AWX's project archive extraction. The project_archive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory traversal sequences. A ma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:21:54.196Z. Updated 2026-10-12T09:40:50.395Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated12 Oct 2026, 16:40 WIB

Official record

HighPublished 24 Aug 2026, 22:21 WIB

CVE-2026-21752

HCL Hive is affected by a use of vulnerable third-party components

HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:21:00.797Z. Updated 2026-08-24T20:21:59.411Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated25 Aug 2026, 03:21 WIB

Official record

UnscoredPublished 24 Aug 2026, 22:02 WIB

CVE-2026-19874

Konami's Metal Gear Online 3 contains a heap-based buffer overflow

A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kick_num" to determine the number of entries, and individu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T15:02:51.022Z. Updated 2026-08-24T20:04:13.828Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Aug 2026, 03:04 WIB

Official record

MedPublished 24 Aug 2026, 21:53 WIB

CVE-2026-65053

Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name

Horde IMP's AppleDouble MIME viewer writes an attacker-controlled attachment name into an HTML status block without escaping it. In lib/Mime/Viewer/Appledouble.php, _IMPrender() obtains the name of the data part with IMP_Contents::getPartName(), which returns the MIME part's own name parameter as supplied by the messag…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-24T14:53:43.219Z. Updated 2026-08-29T11:47:32.704Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated29 Aug 2026, 18:47 WIB

Official record