Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 3741–3760 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

MedPublished 20 Aug 2026, 23:00 WIB

CVE-2026-77004

Comfast CF-N1-S mbox-config sprintf command injection

A flaw has been found in Comfast CF-N1-S 2.6.0.1. This impacts the function sprintf of the file /cgi-bin/mbox-config?method=SET&section=ptest_sn. Executing a manipulation of the argument sn can lead to command injection. The attack can be launched remotely. The exploit has been published and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T16:00:09.986Z. Updated 2026-08-20T17:10:13.138Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 00:10 WIB

Official record

HighPublished 20 Aug 2026, 22:58 WIB

CVE-2026-19611

Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using an ASCII-only dictionary against accounts whose passwords were intended to include t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 3741 to 3760 of 12259.First page Next page

Published 2026-08-20T15:58:24.190Z. Updated 2026-10-15T17:01:05.567Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 00:01 WIB

Official record

UnscoredPublished 20 Aug 2026, 22:57 WIB

CVE-2026-63044

Apache InLong: Authenticated SSRF via POST /api/node/testConnection

Server-Side Request Forgery (SSRF) vulnerability in Apache InLong. Any authenticated user (no admin role required) can cause the InLong Manager server to make outbound HTTP requests or TCP connections to arbitrary internal hosts and ports. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advise…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:57:02.234Z. Updated 2026-08-21T18:57:30.703Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Aug 2026, 01:57 WIB

Official record

HighPublished 20 Aug 2026, 22:56 WIB

CVE-2026-75140

jsoup Uncontrolled Resource Consumption in XmlTreeBuilder

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited namespace map on every…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:56:50.377Z. Updated 2026-08-21T11:21:02.259Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 18:21 WIB

Official record

UnscoredPublished 20 Aug 2026, 22:53 WIB

CVE-2026-63043

Apache InLong: Agent path traversal via unvalidated file source path

Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/12146 .

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:53:11.930Z. Updated 2026-08-24T16:57:47.311Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Aug 2026, 23:57 WIB

Official record

UnscoredPublished 20 Aug 2026, 22:50 WIB

CVE-2026-63042

Apache InLong: Missing authorization on DataNode management endpoints

Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who can authenticate to the manager can create, modify and delete Data Node definitions. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:50:06.733Z. Updated 2026-08-24T16:57:08.270Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Aug 2026, 23:57 WIB

Official record

UnscoredPublished 20 Aug 2026, 22:48 WIB

CVE-2026-63040

Apache InLong: Missing authorization in StreamSource forceDelete

Files or Directories Accessible to External Parties vulnerability in Apache InLong. StreamSource performs no authorization check, any authenticated user can logically delete ALL stream sources. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:48:53.042Z. Updated 2026-08-24T16:56:31.345Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Aug 2026, 23:56 WIB

Official record

MedPublished 20 Aug 2026, 22:45 WIB

CVE-2026-76999

SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects the function add_grade of the file /index.php. Performing a manipulation of the argument student_id results in improper authorization. The attack can be initiated remotely.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:45:08.190Z. Updated 2026-08-20T17:43:57.887Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 00:43 WIB

Official record

UnscoredPublished 20 Aug 2026, 22:43 WIB

CVE-2026-63039

Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject the string value into the SQL statement, enabling SQL injection. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache I…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:43:55.637Z. Updated 2026-08-24T16:55:35.826Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Aug 2026, 23:55 WIB

Official record

UnscoredPublished 20 Aug 2026, 22:42 WIB

CVE-2026-63038

Apache InLong: SQL Injection via String Concatenation Vulnerability Report

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject arbitrary SQL code through the dbName, tableName, schemaName, and username parameters. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:42:47.028Z. Updated 2026-08-24T16:55:01.857Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Aug 2026, 23:55 WIB

Official record

UnscoredPublished 20 Aug 2026, 22:37 WIB

CVE-2026-63037

Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause against the Manager backend database. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:37:35.375Z. Updated 2026-08-24T16:54:16.354Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Aug 2026, 23:54 WIB

Official record

UnscoredPublished 20 Aug 2026, 22:33 WIB

CVE-2026-63016

Apache InLong: Ordinary users can create new packages

Uncontrolled Resource Consumption vulnerability in Apache InLong. Users could affect operational configuration or allow upload of non-official packages. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1] https://g…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:33:01.461Z. Updated 2026-08-20T17:09:14.898Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Aug 2026, 00:09 WIB

Official record

UnscoredPublished 20 Aug 2026, 22:31 WIB

CVE-2026-63015

Apache InLong: Non-template responsible persons can view template information

Uncontrolled Resource Consumption vulnerability in Apache InLong. Non-template responsible persons can view template information. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:31:28.560Z. Updated 2026-08-20T17:09:13.663Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Aug 2026, 00:09 WIB

Official record

MedPublished 20 Aug 2026, 22:30 WIB

CVE-2026-76998

SourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=delete_category. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:30:10.345Z. Updated 2026-08-21T16:04:17.070Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 23:04 WIB

Official record

MedPublished 20 Aug 2026, 22:15 WIB

CVE-2026-76997

SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=save_category. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made avai…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:15:12.503Z. Updated 2026-08-21T16:40:45.151Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 23:40 WIB

Official record

MedPublished 20 Aug 2026, 22:00 WIB

CVE-2026-76996

SourceCodester Simple Online Food Ordering System view_order.php sql injection

A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/view_order.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T15:00:10.067Z. Updated 2026-08-25T14:43:41.813Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:43 WIB

Official record

HighPublished 20 Aug 2026, 21:45 WIB

CVE-2026-63490

Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.3, com.github.jknack.handlebars.springmvc.SpringTemplateLoader resolves attacker-influenced Spring MVC view names through Spring ResourceLoader without the path-containment validation used by other URL-based loaders. In handleba…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T14:45:35.727Z. Updated 2026-08-25T14:41:57.989Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:41 WIB

Official record

MedPublished 20 Aug 2026, 21:45 WIB

CVE-2026-76995

SourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_menu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T14:45:07.980Z. Updated 2026-08-20T17:00:26.843Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 00:00 WIB

Official record

HighPublished 20 Aug 2026, 21:42 WIB

CVE-2026-49825

lxml: javascript: URL bypass in Cleaner via xlink:href

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in ``lxml.html.defs.link_attrs`` were missing ``xlink:href``, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxml_html_clean 0.4.5.

Excerpt language: en.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T14:42:30.748Z. Updated 2026-08-21T16:41:54.849Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 23:41 WIB

Official record

HighPublished 20 Aug 2026, 21:39 WIB

CVE-2026-16932

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-20T14:39:09.131Z. Updated 2026-08-21T03:56:03.287Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 10:56 WIB

Official record