Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 2181–2200 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

MedPublished 19 Apr 2026, 17:15 WIB

CVE-2026-6569

kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The vendor was contacted ea…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-19T10:15:11.445Z. Updated 2026-04-20T14:55:28.674Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated20 Apr 2026, 21:55 WIB

Official record

MedPublished 19 Apr 2026, 16:45 WIB

CVE-2026-6568

kodcloud KodExplorer Public Share share.class.php initShareOld path traversal

A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.class.php::initShareOld of the file /app/controller/share.class.php of the component Public Share Handler. This manipulation of the argument path causes path traversal. The attack can be initiated remotely. The exploit ha…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2181 to 2200 of 5813.First page Next page

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-19T09:45:11.131Z. Updated 2026-04-20T15:20:09.531Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated20 Apr 2026, 22:20 WIB

Official record

MedPublished 19 Apr 2026, 16:30 WIB

CVE-2026-6564

EMQ EMQX Enterprise Session Handling improper authorization

A vulnerability was found in EMQ EMQX Enterprise up to 6.1.0. The impacted element is an unknown function of the component Session Handling. The manipulation results in improper authorization. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted earl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-19T09:30:15.159Z. Updated 2026-04-20T16:09:52.702Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated20 Apr 2026, 23:09 WIB

Official record

HighPublished 19 Apr 2026, 15:30 WIB

CVE-2026-6563

H3C Magic B1 aspForm SetAPWifiorLedInfoById buffer overflow

A vulnerability has been found in H3C Magic B1 up to 100R004. The affected element is the function SetAPWifiorLedInfoById of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-19T08:30:14.248Z. Updated 2026-04-20T14:18:45.761Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated20 Apr 2026, 21:18 WIB

Official record

MedPublished 19 Apr 2026, 15:15 WIB

CVE-2026-6562

dameng100 muucmf index.html getListByPage sql injection

A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is the function getListByPage of the file /index/Search/index.html. Executing a manipulation of the argument keyword can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was conta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-19T08:15:11.633Z. Updated 2026-04-20T16:06:23.786Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated20 Apr 2026, 23:06 WIB

Official record

MedPublished 19 Apr 2026, 14:15 WIB

CVE-2026-6561

EyouCMS Index.php edit_adminlogo unrestricted upload

A vulnerability was detected in EyouCMS up to 1.7.1. This issue affects the function edit_adminlogo of the file application/admin/controller/Index.php. Performing a manipulation of the argument filename results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-19T07:15:11.267Z. Updated 2026-04-20T14:55:35.698Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated20 Apr 2026, 21:55 WIB

Official record

HighPublished 19 Apr 2026, 13:45 WIB

CVE-2026-6560

H3C Magic B0 aspForm Edit_BasicSSID buffer overflow

A security vulnerability has been detected in H3C Magic B0 up to 100R002. This vulnerability affects the function Edit_BasicSSID of the file /goform/aspForm. Such manipulation of the argument param leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-19T06:45:14.514Z. Updated 2026-04-20T15:20:44.443Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated20 Apr 2026, 22:20 WIB

Official record

MedPublished 19 Apr 2026, 12:15 WIB

CVE-2026-6559

Wavlink WL-WN579A3 login.cgi sub_401F80 cross site scripting

A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. Upgrading the affected component is recommended. The vendor was contact…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-19T05:15:15.503Z. Updated 2026-04-20T16:07:54.597Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated20 Apr 2026, 23:07 WIB

Official record

MedPublished 19 Apr 2026, 10:26 WIB

CVE-2026-0868

EMC Scheduling Manager <= 4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via calendly Shortcode

The EMC – Easily Embed Calendly Scheduling Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's calendly shortcode in all versions up to, and including, 4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authentic…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-19T03:26:14.765Z. Updated 2026-04-20T16:53:24.024Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated20 Apr 2026, 23:53 WIB

Official record

CritPublished 18 Apr 2026, 23:18 WIB

CVE-2026-41242

protobufjs has an arbitrary code execution issue

protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code in the "type" fields of protobuf definitions, which will then execute during object decoding using that definition. Versions 8.0.1 and 7.5.5 patch the issue.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T16:18:10.652Z. Updated 2026-09-09T12:05:00.268Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated09 Sep 2026, 19:05 WIB

Official record

UnscoredPublished 18 Apr 2026, 20:22 WIB

CVE-2026-40948

Apache Airflow Providers Keycloak: OAuth Login CSRF — Missing State Parameter in Keycloak Auth Manager

The Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or validate the OAuth 2.0 `state` parameter on the login / login-callback flow, and did not use PKCE. An attacker with a Keycloak account in the same realm could deliver a crafted callback URL to a victim's browser and cause the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T13:22:41.577Z. Updated 2026-04-20T16:17:53.543Z.

CVSS—KEVNot listedEPSSPresentUpdated20 Apr 2026, 23:17 WIB

Official record

MedPublished 18 Apr 2026, 18:16 WIB

CVE-2026-2986

Contextual Related Posts <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes'

The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes' parameter in versions up to, and including, 4.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and ab…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T11:16:10.980Z. Updated 2026-04-20T14:19:06.323Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated20 Apr 2026, 21:19 WIB

Official record

MedPublished 18 Apr 2026, 16:26 WIB

CVE-2026-2505

Categories Images <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'z_taxonomy_image' Shortcode

The Categories Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.1, via the 'z_taxonomy_image' shortcode. This is due to the shortcode rendering path passing attacker-controlled class input into a fallback image builder that concatenates HTML attributes witho…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T09:26:52.654Z. Updated 2026-04-20T13:46:07.918Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated20 Apr 2026, 20:46 WIB

Official record

MedPublished 18 Apr 2026, 16:26 WIB

CVE-2026-0894

Content Blocks (Custom Post Widget) <= 3.3.9 - Authenticated (Author+) Stored Cross-Site Scripting via content_block Shortcode

The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's content_block shortcode in all versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping on user supplied values consumed from user-created content blocks. Thi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T09:26:52.078Z. Updated 2026-04-20T13:48:40.598Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated20 Apr 2026, 20:48 WIB

Official record

MedPublished 18 Apr 2026, 13:43 WIB

CVE-2026-41254

CVE-2026-41254

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

Excerpt language: en.

Severity medium: primary CNA CVSS 4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T06:43:13.741Z. Updated 2026-05-07T17:33:56.924Z.

CVSS4v3.1KEVNot listedEPSSPresentUpdated08 May 2026, 00:33 WIB

Official record

UnscoredPublished 18 Apr 2026, 13:22 WIB

CVE-2026-32690

Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1

Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked. If you do not store variables with sensitive values in JSON form, you are not affected. Otherwise please upgrade to Apache Airflow 3.2.0 th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T06:22:26.081Z. Updated 2026-04-20T16:11:33.956Z.

CVSS—KEVNot listedEPSSPresentUpdated20 Apr 2026, 23:11 WIB

Official record

UnscoredPublished 18 Apr 2026, 13:20 WIB

CVE-2026-30898

Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf

An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of UI user to allow execute code on worker. Users should review if any of their own DAGs have adopted this incorrect advice.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T06:20:48.647Z. Updated 2026-04-22T03:55:38.783Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Apr 2026, 10:55 WIB

Official record

UnscoredPublished 18 Apr 2026, 13:20 WIB

CVE-2026-30912

Apache Airflow: Exposing stack trace in case of constraint error

In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T06:20:30.254Z. Updated 2026-04-20T16:26:07.128Z.

CVSS—KEVNot listedEPSSPresentUpdated20 Apr 2026, 23:26 WIB

Official record

UnscoredPublished 18 Apr 2026, 13:20 WIB

CVE-2026-25917

Apache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5)

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T06:20:11.187Z. Updated 2026-04-22T13:58:49.807Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Apr 2026, 20:58 WIB

Official record

UnscoredPublished 18 Apr 2026, 13:19 WIB

CVE-2026-32228

Apache Airflow: Users with asset materialization permisssions could trigger Dags they had no access to

UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-18T06:19:47.512Z. Updated 2026-04-20T15:54:05.072Z.

CVSS—KEVNot listedEPSSPresentUpdated20 Apr 2026, 22:54 WIB

Official record