Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 3621–3640 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

HighPublished 10 Apr 2026, 08:24 WIB

CVE-2026-3360

Tutor LMS <= 3.9.7 - Missing Authorization to Unauthenticated Arbitrary Billing Profile Overwrite via 'order_id' Parameter

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an Insecure Direct Object Reference in all versions up to, and including, 3.9.7. This is due to missing authentication and authorization checks in the `pay_incomplete_order()` function. The function accepts an attacker-controlled…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T01:24:58.426Z. Updated 2026-04-10T17:05:46.556Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated11 Apr 2026, 00:05 WIB

Official record

MedPublished 10 Apr 2026, 08:24 WIB

CVE-2026-2712

WP-Optimize <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update and Image Manipulation

The WP-Optimize plugin for WordPress is vulnerable to unauthorized access of functionality due to missing capability checks in the `receive_heartbeat()` function in `includes/class-wp-optimize-heartbeat.php` in all versions up to, and including, 4.5.0. This is due to the Heartbeat handler directly invoking `Updraft_Smu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 3621 to 3640 of 5813.First page Next page

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T01:24:57.952Z. Updated 2026-04-10T13:46:16.718Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated10 Apr 2026, 20:46 WIB

Official record

MedPublished 10 Apr 2026, 08:24 WIB

CVE-2026-4664

Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.103.0. This is due to the `create_review_permissions_check()` function comparing the user-supplied `key` parameter against the order's `ivole_secret_key` meta value using strict equal…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T01:24:57.433Z. Updated 2026-04-10T12:18:36.208Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated10 Apr 2026, 19:18 WIB

Official record

HighPublished 10 Apr 2026, 08:24 WIB

CVE-2026-25203

CVE-2026-25203

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T01:24:07.308Z. Updated 2026-04-14T03:55:38.631Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated14 Apr 2026, 10:55 WIB

Official record

CritPublished 10 Apr 2026, 08:15 WIB

CVE-2026-5997

Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection

A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setLoginPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument admpass results in os command injection. It is possible to launch the attack remotely. The explo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T01:15:16.040Z. Updated 2026-04-10T13:47:48.462Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated10 Apr 2026, 20:47 WIB

Official record

CritPublished 10 Apr 2026, 08:00 WIB

CVE-2026-5996

Totolink A7100RU CGI cstecgi.cgi setAdvancedInfoShow os command injection

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setAdvancedInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tty_server leads to os command injection. It is possible to initiate the attack re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T01:00:18.922Z. Updated 2026-04-14T03:16:32.811Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 10:16 WIB

Official record

CritPublished 10 Apr 2026, 07:45 WIB

CVE-2026-5995

Totolink A7100RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection

A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument lan_info can lead to os command injection. The attack may be performed from remote. The exploit …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:45:13.953Z. Updated 2026-04-10T12:19:00.502Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated10 Apr 2026, 19:19 WIB

Official record

CritPublished 10 Apr 2026, 07:30 WIB

CVE-2026-5994

Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injection

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument telnet_enabled results in os command injection. The attack is possible to be carried out rem…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:30:13.988Z. Updated 2026-04-10T17:06:56.098Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated11 Apr 2026, 00:06 WIB

Official record

CritPublished 10 Apr 2026, 07:15 WIB

CVE-2026-5993

Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injection

A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument wifiOff leads to os command injection. The attack can be executed remotely. The exploit is pub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:15:14.223Z. Updated 2026-04-14T16:33:44.412Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 23:33 WIB

Official record

HighPublished 10 Apr 2026, 07:00 WIB

CVE-2026-5992

Tenda F451 P2pListFilter fromP2pListFilter stack-based overflow

A vulnerability was determined in Tenda F451 1.0.0.7. This affects the function fromP2pListFilter of the file /goform/P2pListFilter. This manipulation of the argument page causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:21.425Z. Updated 2026-04-10T13:48:20.916Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated10 Apr 2026, 20:48 WIB

Official record

UnscoredPublished 10 Apr 2026, 07:00 WIB

CVE-2025-44560

CVE-2025-44560

owntone-server 2ca10d9 is vulnerable to Buffer Overflow due to lack of recursive checking.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:00.000Z. Updated 2026-04-14T14:06:50.236Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Apr 2026, 21:06 WIB

Official record

UnscoredPublished 10 Apr 2026, 07:00 WIB

CVE-2026-23780

CVE-2026-23780

An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A SQL injection vulnerability in the MFT API's debug interface allows an authenticated attacker to inject malicious queries due to improper input validation and unsafe dynamic SQL handling. Successful exploitation can enable arbitrary file read/write o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:00.000Z. Updated 2026-04-14T13:56:44.167Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Apr 2026, 20:56 WIB

Official record

UnscoredPublished 10 Apr 2026, 07:00 WIB

CVE-2026-23781

CVE-2026-23781

An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A set of default debug user credentials is hardcoded in cleartext within the application package. If left unchanged, these credentials can be easily obtained and may allow unauthorized access to the MFT API debug interface.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:00.000Z. Updated 2026-04-14T14:29:17.309Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Apr 2026, 21:29 WIB

Official record

UnscoredPublished 10 Apr 2026, 07:00 WIB

CVE-2026-23782

CVE-2026-23782

An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. An API management endpoint allows unauthenticated users to obtain both an API identifier and its corresponding secret value. With these exposed secrets, an attacker could invoke privileged API operations, potentially leading to unauthorized access.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:00.000Z. Updated 2026-04-14T14:00:37.511Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Apr 2026, 21:00 WIB

Official record

UnscoredPublished 10 Apr 2026, 07:00 WIB

CVE-2026-29861

CVE-2026-29861

PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:00.000Z. Updated 2026-04-14T14:08:36.518Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Apr 2026, 21:08 WIB

Official record

UnscoredPublished 10 Apr 2026, 07:00 WIB

CVE-2026-31262

CVE-2026-31262

Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform (SB2) v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:00.000Z. Updated 2026-04-14T14:12:27.998Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Apr 2026, 21:12 WIB

Official record

LowPublished 10 Apr 2026, 07:00 WIB

CVE-2026-33551

CVE-2026-33551

An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:00.000Z. Updated 2026-04-10T13:50:43.389Z.

CVSS3.5v3.1KEVNot listedEPSSPresentUpdated10 Apr 2026, 20:50 WIB

Official record

UnscoredPublished 10 Apr 2026, 07:00 WIB

CVE-2026-36232

CVE-2026-36232

A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $_GET['classId'] is directly concatenated into the SQL query without any sanitization or validation.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:00.000Z. Updated 2026-04-14T14:14:30.652Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Apr 2026, 21:14 WIB

Official record

UnscoredPublished 10 Apr 2026, 07:00 WIB

CVE-2026-36233

CVE-2026-36233

A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers can inject malicious code via the parameter "subjcode" and use it directly in SQL queries without the need for appropriate cleaning or valid…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:00.000Z. Updated 2026-04-14T14:19:38.512Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Apr 2026, 21:19 WIB

Official record

UnscoredPublished 10 Apr 2026, 07:00 WIB

CVE-2026-36234

CVE-2026-36234

itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-10T00:00:00.000Z. Updated 2026-04-14T14:02:19.446Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Apr 2026, 21:02 WIB

Official record