Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 2081–2100 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

MedPublished 27 Oct 2026, 02:53 WIB

CVE-2026-57184

Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, insufficient bounds checking in the `chan_ooh323` `Q.931` `information-element parser` permits an `out-of-bounds read` that may allow an unauthent…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:53:10.021Z. Updated 2026-10-29T01:52:01.081Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 08:52 WIB

Official record

MedPublished 27 Oct 2026, 02:53 WIB

CVE-2026-65626

Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracle. eme_pkcs1_decode/2 returns the recovered message when a decrypted block has valid PKCS#1 v1.5 padding (a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator) and returns a …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2081 to 2100 of 16156.First page Next page

Severity medium: primary CNA CVSS 5.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:53:05.620Z. Updated 2026-10-26T19:53:05.620Z.

CVSS5.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:53 WIB

Official record

MedPublished 27 Oct 2026, 02:52 WIB

CVE-2026-65625

Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose

The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the {aes_gcm, Bits} clause of block_decrypt/4, the incoming tag is guarded only by is_binary/1, with no check on its length. Verification in gcm_block_decrypt/6 then computes…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:52:54.987Z. Updated 2026-10-26T19:52:54.987Z.

CVSS5.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:52 WIB

Official record

MedPublished 27 Oct 2026, 02:52 WIB

CVE-2026-70381

Unauthorized Access to Internal Web Resources

An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide administrative functionali…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:52:44.232Z. Updated 2026-10-26T19:52:44.232Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:52 WIB

Official record

MedPublished 27 Oct 2026, 02:46 WIB

CVE-2026-57193

Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, the LDAP realtime driver `res_config_ldap` may permit `LDAP filter injection` through a `SIP username`, allowing an unauthenticated attacker to ma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:46:01.924Z. Updated 2026-10-26T19:46:01.924Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:46 WIB

Official record

MedPublished 27 Oct 2026, 02:45 WIB

CVE-2026-70380

Resource Exhaustion in MICE Service

A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-based Miracast connection…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:45:17.820Z. Updated 2026-10-26T19:45:17.820Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:45 WIB

Official record

MedPublished 27 Oct 2026, 02:45 WIB

CVE-2026-116479

a2aproject a2a-java JSON-RPC Error getMessage information exposure

A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JSON-RPC Error Handler. This manipulation causes information exposure through error message. The attack can be initiated remotely. Upgrading to version 1.3.0.Final will fix this issue. Patch name: bbee3…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:45:11.028Z. Updated 2026-10-27T14:18:35.499Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:18 WIB

Official record

UnscoredPublished 27 Oct 2026, 02:38 WIB

CVE-2026-115533

CVE-2026-115533

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically resolve and instantiat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:38:54.907Z. Updated 2026-10-26T19:38:54.907Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:38 WIB

Official record

MedPublished 27 Oct 2026, 02:37 WIB

CVE-2026-115927

Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked transfer encoding by processing body data that has already arrived without yielding to the event loop. A remote unauthenticated peer can send millions of one-byte chunks to monopolize the process even…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:37:40.584Z. Updated 2026-10-27T14:18:44.227Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 21:18 WIB

Official record

HighPublished 27 Oct 2026, 02:31 WIB

CVE-2026-57187

Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a heap-use-after-free in `PJSIP TCP/SDP` handling by sending a `SIP INVITE` over a connection-oriented transpo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:31:52.937Z. Updated 2026-10-26T19:31:52.937Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:31 WIB

Official record

MedPublished 27 Oct 2026, 02:30 WIB

CVE-2026-116478

a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely. Upgrading to version 2…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:30:19.254Z. Updated 2026-10-26T19:30:19.254Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:30 WIB

Official record

LowPublished 27 Oct 2026, 02:27 WIB

CVE-2026-57196

Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unauthenticated attacker may use reflected cross-site scripting in `phone provisioning HTTP error pages` to retrieve an authorized user's `AMI …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:27:35.360Z. Updated 2026-10-26T20:13:49.872Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 03:13 WIB

Official record

HighPublished 27 Oct 2026, 02:22 WIB

CVE-2026-115924

Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs

Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model through rembg/commands/s_command.py to rembg/sessions/sam.py, where it is interpolated into SAM filenames and GitHub download URLs passed to pooch.retrieve() without a pinned hash. A…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:22:52.720Z. Updated 2026-10-26T19:22:52.720Z.

CVSS8.6v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:22 WIB

Official record

MedPublished 27 Oct 2026, 02:15 WIB

CVE-2026-116477

a2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the function A2AJsonRpcProcessor.ProcessRequestAsync of the file src/A2A.AspNetCore/A2AJsonRpcProcessor.cs of the component Parser. The manipulation leads to information exposure through error message. It i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:15:22.114Z. Updated 2026-10-26T19:15:22.114Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:15 WIB

Official record

MedPublished 27 Oct 2026, 02:00 WIB

CVE-2014-125135

OctoPrint Flask Secret Key hard-coded key

A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the component Flask Secret Key Handler. Such manipulation leads to use of hard-coded cryptographic key . The attack may be performed from remote. Upgrading to version 1.11.1 is able to address this issue. The name o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T19:00:19.803Z. Updated 2026-10-26T19:34:15.433Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:34 WIB

Official record

MedPublished 27 Oct 2026, 01:45 WIB

CVE-2026-116476

a2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Executing a manipulation can lead to race condition. The attack may be performed from remote. The pull request to fix this issue awaits acceptanc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:45:20.493Z. Updated 2026-10-26T18:45:20.493Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 01:45 WIB

Official record

CritPublished 27 Oct 2026, 01:38 WIB

CVE-2026-110720

Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability (CVE-2026-110720) is fixed in consul-k8s 2.1.0 and 1.8.18.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:38:14.209Z. Updated 2026-10-26T19:38:28.240Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:38 WIB

Official record

UnscoredPublished 27 Oct 2026, 01:32 WIB

CVE-2026-116631

External protocol handler (tel:) address bar spoof

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:32:36.715Z. Updated 2026-10-26T18:57:54.011Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 01:57 WIB

Official record

UnscoredPublished 27 Oct 2026, 01:32 WIB

CVE-2026-116632

Facetime protocol handler enabled spoofing

A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:32:35.728Z. Updated 2026-10-26T18:56:21.288Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Oct 2026, 01:56 WIB

Official record

MedPublished 27 Oct 2026, 01:30 WIB

CVE-2026-116471

BKWLD Decoy Authorization Policy Policy.php privileges management

A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file Policy.php of the component Authorization Policy. The manipulation of the argument role results in improper privilege management. The attack may be performed from remote. The exploit has been release…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:30:15.152Z. Updated 2026-10-26T18:30:15.152Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 01:30 WIB

Official record