Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 2101–2120 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

MedPublished 27 Oct 2026, 01:15 WIB

CVE-2026-116467

ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion

A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the component Mirostat Sampler. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The project was informed o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:15:14.725Z. Updated 2026-10-26T19:34:25.208Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:34 WIB

Official record

MedPublished 27 Oct 2026, 01:09 WIB

CVE-2026-115804

Consul vulnerable to an authorization bypass in health check registration

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in health check registration that may allow an authenticated user to modify health checks belonging to another service on the same node. This vulnerability (CVE-2026-115804) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2101 to 2120 of 16156.First page Next page

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:09:52.286Z. Updated 2026-10-26T19:38:28.416Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:38 WIB

Official record

HighPublished 27 Oct 2026, 01:09 WIB

CVE-2026-116634

OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens

OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider credentials and plaintext API …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:09:41.236Z. Updated 2026-10-26T19:34:36.562Z.

CVSS8.2v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:34 WIB

Official record

MedPublished 27 Oct 2026, 01:08 WIB

CVE-2026-50096

BUG-000187164 - ArcGIS Server has a security vulnerability.

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. A patch is provided for ArcGIS Server soft…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:08:38.927Z. Updated 2026-10-26T19:38:28.569Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:38 WIB

Official record

MedPublished 27 Oct 2026, 01:08 WIB

CVE-2026-50095

BUG-000187165 - ArcGIS Server has a security vulnerability.

There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser. A patch is provided for ArcGIS Server software i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:08:17.080Z. Updated 2026-10-26T19:38:28.708Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:38 WIB

Official record

MedPublished 27 Oct 2026, 01:07 WIB

CVE-2026-33522

BUG-000182936 - ArcGIS Server has a security vulnerability.

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or retired status, which are …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:07:42.491Z. Updated 2026-10-26T19:38:28.853Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:38 WIB

Official record

HighPublished 27 Oct 2026, 01:07 WIB

CVE-2026-33521

BUG-000186514 - ArcGIS Server has a security vulnerability.

There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may allow a remote, unauthenticated attacker to supply crafted requests that may, under exceptional circumstances, consume all available worker threads and deny service to users. A patch is provided for ArcGIS Server software …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:07:20.638Z. Updated 2026-10-26T19:38:29.004Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:38 WIB

Official record

MedPublished 27 Oct 2026, 01:06 WIB

CVE-2026-33520

BUG-000185167 - ArcGIS Server has a security vulnerability.

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. A patch is provided for impacted ArcGIS Se…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:06:47.087Z. Updated 2026-10-26T19:38:29.146Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:38 WIB

Official record

CritPublished 27 Oct 2026, 01:05 WIB

CVE-2026-10757

BUG-000187511 - ArcGIS Server has a security vulnerability.

There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service (which could, depending on the service being configured in a non-default access configuration “public”, include an anonymous attacker) to iss…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:05:59.365Z. Updated 2026-10-29T12:15:56.185Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 19:15 WIB

Official record

HighPublished 27 Oct 2026, 01:02 WIB

CVE-2026-105626

Consul vulnerable to a denial of service in HTTP APIs

HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an unauthenticated attacker to exhaust memory on a Consul agent. This vulnerability (CVE-2026-105626) is fixed in Consul Community Edition 2.1.0 and Consul Enterprise 2.1.0 and 1.21.19.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:02:25.376Z. Updated 2026-10-26T19:38:29.471Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:38 WIB

Official record

MedPublished 27 Oct 2026, 01:00 WIB

CVE-2026-116463

FastStone Image Viewer Box-Average Downsampler FUN_0062d96c out-of-bounds

A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the component Box-Average Downsampler Engine. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respon…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T18:00:15.404Z. Updated 2026-10-26T18:00:15.404Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 01:00 WIB

Official record

MedPublished 27 Oct 2026, 00:56 WIB

CVE-2026-115923

Backstage catalog rules can be bypassed for URL locations using encoded path segments

Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalogRulesEnforcer in @backstage/plugin-catalog-backend compares the raw location.target URL against catalog.rules, while URL readers canonicalize the same URL before fetching it. An authenticated user wit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T17:56:20.105Z. Updated 2026-10-26T17:56:20.105Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:56 WIB

Official record

HighPublished 27 Oct 2026, 00:52 WIB

CVE-2026-105608

Consul vulnerable to an authorization bypass in service mesh registration

HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh proxy registration. This may allow a user with service write permission to apply Envoy escape-hatch configuration without the required mesh write permission. This vulnerability (CVE-2026-105608) is fixed in Consul Community…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T17:52:33.021Z. Updated 2026-10-26T19:38:29.607Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 02:38 WIB

Official record

HighPublished 27 Oct 2026, 00:48 WIB

CVE-2026-70379

Unauthorized Access to vSolution Matrix RTSP

When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network segment. The stream is not encrypted, which may allow an unauthenticated host to view or capture presentation content where network access is n…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T17:48:55.829Z. Updated 2026-10-26T17:48:55.829Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:48 WIB

Official record

MedPublished 27 Oct 2026, 00:45 WIB

CVE-2026-116461

Omega Solution Restro POS sale-invoice logic error

A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file /sale-invoice/. Executing a manipulation of the argument productUnitSalePrice can lead to business logic errors. The attack may be performed from remote. The exploit has been publicly disclosed and m…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T17:45:12.006Z. Updated 2026-10-26T17:45:12.006Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:45 WIB

Official record

HighPublished 27 Oct 2026, 00:42 WIB

CVE-2026-105765

Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API

HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's service mesh leaf certificate API that may allow an attacker without a valid ACL token to retrieve a cached service leaf certificate and its private key. This vulnerability (CVE-2026-105765) is fixed in Co…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T17:42:36.012Z. Updated 2026-10-26T18:12:14.351Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 01:12 WIB

Official record

MedPublished 27 Oct 2026, 00:31 WIB

CVE-2026-115922

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_2bit() and _unpack_4bit() resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that raw_data or int32_data encodes the declared number of elements. Materializing …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T17:31:03.716Z. Updated 2026-10-26T17:31:03.716Z.

CVSS6.2v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:31 WIB

Official record

MedPublished 27 Oct 2026, 00:29 WIB

CVE-2026-116408

WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through 1.3.7.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T17:29:38.120Z. Updated 2026-10-26T17:57:32.081Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:57 WIB

Official record

LowPublished 27 Oct 2026, 00:28 WIB

CVE-2026-111404

WordPress Photo Reviews for WooCommerce plugin <= 1.2.31 - Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Leveraging Race Conditions.This issue affects Photo Reviews for WooCommerce: from n/a through 1.2.31.

Excerpt language: en.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T17:28:57.422Z. Updated 2026-10-26T17:57:32.283Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:57 WIB

Official record

MedPublished 27 Oct 2026, 00:28 WIB

CVE-2026-115921

ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunction, ScanInferenceFunction_opset8, and ScanInferenceFunction_opset9 do not safely validate the required num_scan_inputs attribute. A missing attribute is dereferenced as a null point…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T17:28:41.420Z. Updated 2026-10-26T17:28:41.420Z.

CVSS6.2v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:28 WIB

Official record