Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 2261–2280 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

LowPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116486

Objenesis before 3.6 Type Confusion via Class Name Instantiator Cache

Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects into another by exploiting instantiator caching keyed on class name. When a shared ObjenesisStd instance caches instantiators by clazz.getName() in ObjenesisBase.getInstantiatorOf(), same-named classe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:52.051Z. Updated 2026-10-26T16:15:59.231Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 23:15 WIB

Official record

CritPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116485

danmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints

danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMIN_TOKEN is unset. Attackers can send POST requests to /api/env/set, /api/env/add, or /api/env/del to set ADMIN_TOKEN, lock out o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2261 to 2280 of 16156.First page Next page

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:51.363Z. Updated 2026-10-26T13:08:51.363Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 20:08 WIB

Official record

HighPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116219

Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter

Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets authenticated administrators bypass the restrict_os_commands allowlist. Attackers can submit a mysqldump value chaining commands with & characters around an allowlisted basename to execute operating …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:50.681Z. Updated 2026-10-26T17:47:51.312Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:47 WIB

Official record

HighPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116218

Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection via bankaccounts API type field

Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inject SQL via the type field of the third-party bankaccounts REST endpoint. Attackers with only societe/creer permission can break out of the unescaped type value in CompanyBankAccount::create() to read…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:49.982Z. Updated 2026-10-26T17:47:50.586Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:47 WIB

Official record

MedPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116217

RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.php

RosarioSIS before 12.9.2 contains a reflected cross-site scripting vulnerability in modules/Food_Service/MenuReports.php that allows unauthenticated attackers to inject attributes via unescaped menu_id and modname parameters. Attackers can lure a logged-in administrator to a crafted Modules.php link whose double-quoted…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:49.288Z. Updated 2026-10-26T17:47:49.908Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 00:47 WIB

Official record

MedPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116216

MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment

MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attackers to set arbitrary mac_comment columns including user_id. Attackers can submit anonymous comments with a crafted user_id parameter to attribute them to any registered member, displ…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:48.563Z. Updated 2026-10-26T13:08:48.563Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 20:08 WIB

Official record

LowPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116215

MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption

MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one recharge card multiple times via the user/buy endpoint. Attackers can send many concurrent flag=card requests that pass the non-locking card read before it is marked used, inflati…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:47.862Z. Updated 2026-10-26T13:08:47.862Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 20:08 WIB

Official record

CritPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116214

MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code

MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because check_msg() never compares msg_to. Attackers can request a recovery code to their own mailbox via user/findpass_msg, then submit it to user/findpass_reset with th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:47.141Z. Updated 2026-10-26T13:08:47.141Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 20:08 WIB

Official record

MedPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116213

Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks

Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writeItem() that creates symlinks from theme archives without validating link targets. Authenticated users with theme management rights can upload themes containing symlinks to wa-config/db.php or /etc/passwd and read them t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:46.452Z. Updated 2026-10-26T16:16:21.761Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 23:16 WIB

Official record

MedPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116212

Webasyst Framework through 4.4.0 Stored XSS via Photos Album URL

Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos app that allows authenticated backend users to inject JavaScript via the album url parameter. Attackers with album edit rights can save a url value that breaks out of the unescaped attribute in DialogAlbumSettings.html, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:45.751Z. Updated 2026-10-26T13:08:45.751Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 20:08 WIB

Official record

HighPublished 26 Oct 2026, 20:08 WIB

CVE-2026-116210

Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions

Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remote attackers to perform backend actions because the app does not enable the framework's opt-in CSRF check. Attackers can lure logged-in Photos users to a malicious page that submits forged POST request…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:08:45.044Z. Updated 2026-10-26T13:08:45.044Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 20:08 WIB

Official record

MedPublished 26 Oct 2026, 20:00 WIB

CVE-2026-116281

Kameleo Profile Controller t.cs ListProfiles information disclosure

A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-engine-application/t.cs of the component Profile Controller. The manipulation leads to information disclosure. The attack can only be performed from a local environment. Upgrading to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T13:00:10.760Z. Updated 2026-10-26T13:00:10.760Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 20:00 WIB

Official record

LowPublished 26 Oct 2026, 19:52 WIB

CVE-2026-107157

Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework

Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information.

Excerpt language: en.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T12:52:26.628Z. Updated 2026-10-27T07:52:45.806Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 14:52 WIB

Official record

MedPublished 26 Oct 2026, 19:50 WIB

CVE-2026-115196

CVE-2026-115196

An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. An unauthenticated att…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T12:50:18.637Z. Updated 2026-10-26T15:35:52.657Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated26 Oct 2026, 22:35 WIB

Official record

MedPublished 26 Oct 2026, 19:48 WIB

CVE-2026-115195

CVE-2026-115195

A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint did not enforce permissions for several internal tables: an intended administrator-only restriction was never applied, and tables without an explicit permission mapping were readable by default. As a result, any auth…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T12:48:59.588Z. Updated 2026-10-26T15:35:52.798Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated26 Oct 2026, 22:35 WIB

Official record

MedPublished 26 Oct 2026, 19:48 WIB

CVE-2026-115194

CVE-2026-115194

A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the asset upload directory. An authenticated API user with permission to create assets can register any file that is readable by the web server process as a Mautic asse…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T12:48:01.035Z. Updated 2026-10-26T15:35:52.938Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated26 Oct 2026, 22:35 WIB

Official record

HighPublished 26 Oct 2026, 19:46 WIB

CVE-2026-115193

CVE-2026-115193

A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7. Values of HTML-type custom contact fields are rendered without output sanitization. A user or integration able to write a value to such a field (for example, through contact editing, the contact API, or a form submission ma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T12:46:35.447Z. Updated 2026-10-26T15:35:53.085Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated26 Oct 2026, 22:35 WIB

Official record

HighPublished 26 Oct 2026, 19:45 WIB

CVE-2026-115192

CVE-2026-115192

An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}). Chart filter parameters supplied by the client are not properly validated before they are used in the database queries that build dashboard chart data. An authenticated user with API access can exploit this to inject SQL…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T12:45:09.462Z. Updated 2026-10-26T15:35:53.230Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated26 Oct 2026, 22:35 WIB

Official record

MedPublished 26 Oct 2026, 19:45 WIB

CVE-2026-116280

Kameleo Proxy Validation f.cs InternalController.TestProxy server-side request forgery

A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalController.TestProxy of the file client-engine-application/f.cs of the component Proxy Validation. Executing a manipulation of the argument host/port can lead to server-side request forgery. The attack may be launched remotely. U…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T12:45:07.213Z. Updated 2026-10-26T12:45:07.213Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated26 Oct 2026, 19:45 WIB

Official record

HighPublished 26 Oct 2026, 19:42 WIB

CVE-2026-115191

CVE-2026-115191

A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax). A request parameter that selects the contact field to search by is not properly validated before it is used in a database query. Any authenticated Mautic user can exploit this, regardless of the role…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-26T12:42:57.873Z. Updated 2026-10-26T15:35:53.390Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated26 Oct 2026, 22:35 WIB

Official record