Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 3601–3620 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

UnscoredPublished 21 Aug 2026, 03:51 WIB

CVE-2026-76019

CVE-2026-76019

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:51:19.840Z. Updated 2026-08-21T18:44:00.304Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Aug 2026, 01:44 WIB

Official record

UnscoredPublished 21 Aug 2026, 03:51 WIB

CVE-2026-76018

CVE-2026-76018

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:51:19.618Z. Updated 2026-08-22T03:56:27.444Z.

CVSS

Showing 3601 to 3620 of 12259.First page Next page

—

KEVNot listed

EPSSPresent

Updated22 Aug 2026, 10:56 WIB

Official record

UnscoredPublished 21 Aug 2026, 03:51 WIB

CVE-2026-76017

CVE-2026-76017

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:51:19.395Z. Updated 2026-08-21T18:47:55.270Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Aug 2026, 01:47 WIB

Official record

MedPublished 21 Aug 2026, 03:47 WIB

CVE-2026-77587

CVE-2026-77587

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client. This is TROVE-2026-026.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:47:39.964Z. Updated 2026-08-25T19:09:06.542Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:09 WIB

Official record

HighPublished 21 Aug 2026, 03:40 WIB

CVE-2026-18420

RCE via Prototype Pollution in OpenSearch Dashboards

Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enables remote code execut…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:40:40.709Z. Updated 2026-08-25T19:19:07.471Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:19 WIB

Official record

HighPublished 21 Aug 2026, 03:38 WIB

CVE-2026-77584

CVE-2026-77584

Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the same circuit, attaching an exit stream that would later end up orphan leaving a dangling circuit back-pointer and a use-…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:38:42.159Z. Updated 2026-08-25T19:09:53.308Z.

CVSS7v3.1KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:09 WIB

Official record

HighPublished 21 Aug 2026, 03:34 WIB

CVE-2026-73137

Multicloud-operators-subscription: multicloud-operators-subscription: cross-namespace secret exfiltration via helmrelease.repo.secretref.namespace

A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). A tenant with HelmRelease create permissions can exploit this vulnerability by manipulating the `secretRef.Namespace` field. This allows the `GetSecret()` function in the HelmRelease controller to fetch s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:34:13.056Z. Updated 2026-09-05T14:24:51.220Z.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated05 Sep 2026, 21:24 WIB

Official record

CritPublished 21 Aug 2026, 03:34 WIB

CVE-2026-67567

Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restriction

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the ability to create HelmRelease custom resources (CRs), to bypass existing security controls. The system's HelmRelease controller processes Helm chart templates using its own elevated ServiceAccount privil…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:34:10.321Z. Updated 2026-09-05T14:23:52.281Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated05 Sep 2026, 21:23 WIB

Official record

HighPublished 21 Aug 2026, 03:29 WIB

CVE-2026-73040

Dockge Path Traversal via Unvalidated Stack Name Allows Arbitrary Compose and .env Disclosure and Arbitrary Directory Deletion

Dockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in validate(), which requires the name to match ^[a-z0-9_-]+$, is reached from save() alone, while the path getter returns path.join(this.server.stacksDir, this.name) and Stack.getStack builds path.join(server.stacksDir, stac…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:29:00.157Z. Updated 2026-09-24T14:19:06.908Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated24 Sep 2026, 21:19 WIB

Official record

MedPublished 21 Aug 2026, 03:26 WIB

CVE-2026-19755

NoSleep 1.5.1 - Unauthorized disclosure of root-owned files through privileged XPC helper

NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:26:12.423Z. Updated 2026-08-25T19:11:30.734Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:11 WIB

Official record

MedPublished 21 Aug 2026, 03:18 WIB

CVE-2026-77506

CVE-2026-77506

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:18:55.670Z. Updated 2026-08-25T19:12:24.097Z.

CVSS4.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:12 WIB

Official record

HighPublished 21 Aug 2026, 03:06 WIB

CVE-2026-75910

Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an unrelated secret and at …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T20:06:54.217Z. Updated 2026-08-25T19:13:06.552Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:13 WIB

Official record

MedPublished 21 Aug 2026, 02:48 WIB

CVE-2026-72861

Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent

The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. verifyWebhook in node/github-issue-bot/src/github.js and in node-typescript/github-issue-bot/src/github.ts returns "typeof signature !== 'string' || (await verify(...))", so when the X-Hub-Signature-256 …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T19:48:51.102Z. Updated 2026-09-24T14:19:05.054Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Sep 2026, 21:19 WIB

Official record

MedPublished 21 Aug 2026, 02:45 WIB

CVE-2026-77151

lin-snow Ech0 crypto.go MD5Encrypt risky encryption

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an attack is rather high. T…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T19:45:10.732Z. Updated 2026-08-21T21:45:57.804Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated22 Aug 2026, 04:45 WIB

Official record

UnscoredPublished 21 Aug 2026, 01:57 WIB

CVE-2026-43678

CVE-2026-43678

An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T18:57:03.222Z. Updated 2026-08-20T21:10:49.702Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Aug 2026, 04:10 WIB

Official record

LowPublished 21 Aug 2026, 01:55 WIB

CVE-2026-49996

securedrop-proxy origin limitation can be bypassed with redirects

SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. Prior to version 1.3.1, a malicious SecureDrop Server could bypass securedrop-proxy's origin limitation by responding with cross-origin redirects. SecureDrop Server itself has mu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T18:55:57.513Z. Updated 2026-08-20T19:48:57.931Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 02:48 WIB

Official record

UnscoredPublished 21 Aug 2026, 01:53 WIB

CVE-2026-64777

CVE-2026-64777

A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T18:53:12.196Z. Updated 2026-08-20T19:47:09.853Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Aug 2026, 02:47 WIB

Official record

HighPublished 21 Aug 2026, 01:49 WIB

CVE-2026-50190

Shaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink page

Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in `application/front/controller/visitor/BookmarkListController.php`. The `permalink` handler concatenates the raw `$bookmark->getTitle()` into the `pagetitle` template variable and the RainTPL template emits it into the do…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T18:49:48.952Z. Updated 2026-08-20T19:02:02.984Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 02:02 WIB

Official record

MedPublished 21 Aug 2026, 01:40 WIB

CVE-2026-53586

libgit2: HTTP transport can leak credentials to an offsite redirect target

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, the built-in HTTP transport in src/libgit2/transports/http.c follows an offsite initial redirect, and handle_remote_auth an…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T18:40:08.673Z. Updated 2026-08-21T21:46:05.425Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated22 Aug 2026, 04:46 WIB

Official record

MedPublished 21 Aug 2026, 01:39 WIB

CVE-2026-53583

libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verify_server_cert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GEN_IPADD branch when comparing…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T18:39:03.676Z. Updated 2026-08-20T19:04:42.247Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 02:04 WIB

Official record