Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 361–380 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

CritPublished 31 Aug 2026, 06:00 WIB

CVE-2026-82592

D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflow

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now pub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T23:00:13.591Z. Updated 2026-08-31T16:20:48.060Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:20 WIB

Official record

MedPublished 31 Aug 2026, 05:45 WIB

CVE-2026-82591

Open Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetLib/MD5/MD5Loader.cpp. The manipulation of the argument iNewIndex leads to heap-based buffer overflow. The attack can only be performed from …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 361 to 380 of 12259.First page Next page

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T22:45:13.715Z. Updated 2026-08-31T18:56:49.387Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 01:56 WIB

Official record

MedPublished 31 Aug 2026, 05:30 WIB

CVE-2026-82590

Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely. Upgrading to version 2.8.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T22:30:11.286Z. Updated 2026-08-31T22:04:12.430Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 05:04 WIB

Official record

MedPublished 31 Aug 2026, 05:15 WIB

CVE-2026-82589

Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service

A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amf_namf_comm_handle_n1_n2_message_transfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument N1N2MessageTransferReqData.n2InfoContainer.smInfo.n2InfoContent.ngapIeType…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T22:15:11.110Z. Updated 2026-08-31T17:10:12.423Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 00:10 WIB

Official record

MedPublished 31 Aug 2026, 05:00 WIB

CVE-2026-82588

Open5GS Transfer Endpoint namf-handler.c null pointer dereference

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable of addressing this issu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T22:00:13.319Z. Updated 2026-09-01T14:17:52.305Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:17 WIB

Official record

HighPublished 31 Aug 2026, 03:13 WIB

CVE-2026-56718

AJCloud AJY IPC Firmware Path Traversal via jdbhttpd

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traversal sequences in the HTTP request URI. Attackers can send crafted HTTP requests t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T20:13:01.674Z. Updated 2026-09-04T15:08:16.564Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated04 Sep 2026, 22:08 WIB

Official record

MedPublished 31 Aug 2026, 02:00 WIB

CVE-2026-82587

Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruption

A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amf_namf_comm_decode_ue_mm_context_list of the file src/amf/namf-handler.c of the component AMF. This manipulation of the argument ueContext.mmContextList[*].allowedNssai causes memory corruption. The attack can be initiated …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T19:00:11.238Z. Updated 2026-08-31T16:25:38.898Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:25 WIB

Official record

MedPublished 31 Aug 2026, 01:28 WIB

CVE-2026-78693

Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_graphql allows a remote client to read internal field names that an application configured its error_handler to redact. In AshGraphql.Errors, each error is passed to the configured error_handler and the returned map is merged…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T18:28:35.282Z. Updated 2026-08-31T15:58:48.218Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:58 WIB

Official record

HighPublished 31 Aug 2026, 01:27 WIB

CVE-2026-80223

Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read

Incorrect Authorization vulnerability in ash-project ash_graphql allows an authenticated subscriber in one tenant to receive another tenant's records over GraphQL subscriptions. The subscription resolver in AshGraphql.Graphql.Resolver authorizes each notification payload in memory: its fast path calls Ash.can/3 with r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T18:27:09.440Z. Updated 2026-08-31T15:58:00.640Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:58 WIB

Official record

HighPublished 31 Aug 2026, 01:25 WIB

CVE-2026-81636

Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_graphql allows an unauthenticated client to bypass the configured GraphQL query-complexity limit and force an unbounded database read. AshGraphql.Graphql.Resolver.query_complexity/3 multiplies child complexity by the requested page s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T18:25:29.776Z. Updated 2026-08-31T15:57:06.465Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:57 WIB

Official record

MedPublished 31 Aug 2026, 01:22 WIB

CVE-2026-81633

Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment

Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay node(id: ...) query with an unhandled KeyError. AshGraphql.Graphql.Resolver.resolve_node/2 decodes the client-supplied global ID with decode_relay_id/1, which only base64-decodes the string and splits i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T18:22:07.096Z. Updated 2026-08-31T15:56:01.954Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:56 WIB

Official record

LowPublished 31 Aug 2026, 01:20 WIB

CVE-2026-81643

Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification

Incorrect Authorization vulnerability in ash-project ash_graphql delivers GraphQL subscription payloads for records a subscriber is not authorized to see. In AshGraphql.Subscription.Batcher, do_send/5 resolves the first notification of a batch and filters it with should_send?/1, which drops results whose errors are co…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T18:20:35.564Z. Updated 2026-08-31T15:01:05.884Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:01 WIB

Official record

LowPublished 31 Aug 2026, 01:17 WIB

CVE-2026-82367

Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic

Exposure of Data Element to Wrong Session vulnerability in ash-project ash_graphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Subscription.Batcher.do_send/5 reads the resolved batch from the process dictionary via Process.get(:batch_resolved) and then unconditionally …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T18:17:13.538Z. Updated 2026-09-01T15:37:34.054Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 22:37 WIB

Official record

LowPublished 31 Aug 2026, 01:06 WIB

CVE-2026-81322

Cloaked plaintext leaks through a non-sensitive action argument in AshCloak

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with access to logs, error trackers, or crash reports, or anyone who can trigger a validation error, to recover the plaintext of a field the library encrypts. AshCloak.Transformers.SetUpEncryption removes ea…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T18:06:33.478Z. Updated 2026-09-01T12:34:57.167Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 19:34 WIB

Official record

MedPublished 31 Aug 2026, 01:05 WIB

CVE-2026-81319

Unsafe deserialization of decrypted terms enables node DoS in AshCloak

Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes of an encrypted column to crash the BEAM node, by triggering unbounded atom creation or a decompression bomb during decryption. AshCloak.Calculations.Decrypt decodes the decrypted binary with Ash.Hel…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T18:05:13.889Z. Updated 2026-09-01T12:32:46.422Z.

CVSS5.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 19:32 WIB

Official record

MedPublished 31 Aug 2026, 00:45 WIB

CVE-2026-82556

Forgejo Repository Migration is_migrate_allowed.go net.LookupIP server-side request forgery

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/is_migrate_allowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiated remotely. The explo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T17:45:08.226Z. Updated 2026-08-31T18:36:39.909Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 01:36 WIB

Official record

MedPublished 31 Aug 2026, 00:30 WIB

CVE-2026-82555

TOTOLINK N600R Authentication cstecgi.cgi loginAuth random values

A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function loginAuth of the file /web_cste/cgi-bin/cstecgi.cgi of the component Authentication Handler. Such manipulation leads to insufficiently random values. It is possible to launch the attack remotely. This attack…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T17:30:10.581Z. Updated 2026-08-31T22:04:18.589Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 05:04 WIB

Official record

MedPublished 31 Aug 2026, 00:15 WIB

CVE-2026-82554

SourceCodester Queue Management System add_customer.php cross site scripting

A flaw has been found in SourceCodester Queue Management System 1.0. This affects an unknown part of the file /api/add_customer.php. This manipulation of the argument Name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T17:15:08.630Z. Updated 2026-08-31T16:16:13.268Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:16 WIB

Official record

MedPublished 31 Aug 2026, 00:00 WIB

CVE-2026-82553

sambitraj Student Management System Student Dashboard student_dashboard.php mysqli_query improper authorization

A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. Affected by this issue is the function mysqli_query of the file student_dashboard.php of the component Student Dashboard. The manipulation of the argument roll_no results in improper authorization. The at…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T17:00:08.273Z. Updated 2026-09-01T14:11:13.734Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:11 WIB

Official record

MedPublished 30 Aug 2026, 23:45 WIB

CVE-2026-82552

Linux Foundation Magma gNB Termination ngap_amf.c denial of service

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngap_amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out remotely. The exploit h…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T16:45:06.995Z. Updated 2026-08-31T16:34:39.350Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:34 WIB

Official record