Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 381–400 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

MedPublished 30 Aug 2026, 23:30 WIB

CVE-2026-82551

Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_handlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the public and could be used for…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T16:30:08.876Z. Updated 2026-08-31T18:59:10.396Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 01:59 WIB

Official record

MedPublished 30 Aug 2026, 22:45 WIB

CVE-2026-82550

Linux Foundation Magma NGSetupRequest input validation

A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The exploit has been relea…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 381 to 400 of 12259.First page Next page

Published 2026-08-30T15:45:09.408Z. Updated 2026-08-31T22:04:24.555Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 05:04 WIB

Official record

MedPublished 30 Aug 2026, 22:30 WIB

CVE-2026-82549

Linux Foundation Magma SecurityModeComplete integrity check

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T15:30:09.964Z. Updated 2026-08-31T16:17:24.722Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:17 WIB

Official record

HighPublished 30 Aug 2026, 22:13 WIB

CVE-2026-78699

rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres

Unchecked Return Value vulnerability in ash-project ash_postgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their tenant record repointed at that other tenant's live schema, gaining access to its data. AshPostgres.MultiTenancy.rename_tenant/3 issues the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T15:13:23.875Z. Updated 2026-09-01T12:30:30.395Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 19:30 WIB

Official record

MedPublished 30 Aug 2026, 22:00 WIB

CVE-2026-82548

Linux Foundation Magma InitialUEMessage information disclosure

A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T15:00:10.066Z. Updated 2026-09-01T14:08:54.189Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:08 WIB

Official record

MedPublished 30 Aug 2026, 21:45 WIB

CVE-2026-82547

Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf_fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has been made public and …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:45:08.222Z. Updated 2026-09-08T18:05:25.079Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated09 Sep 2026, 01:05 WIB

Official record

MedPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82658

Admidio before 5.0.12 Broken Access Control via profile_function.php

Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php that allows authenticated low-privilege users to read another user's future role memberships. Attackers can bypass profile-level authorization by directly calling the reload_future_memberships endpoint with a victim's u…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:38.044Z. Updated 2026-09-02T15:59:16.720Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated02 Sep 2026, 22:59 WIB

Official record

HighPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82657

Admidio before 5.0.12 Authentication Bypass via RSS feeds

Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements modules. Unauthenticated attackers can retrieve forum topics and announcements by sending GET requests to rss/forum.php or rss/announcements.php, disclosing titles, full post text, author names, and t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:37.262Z. Updated 2026-08-31T16:29:20.099Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:29 WIB

Official record

LowPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82656

Admidio before 5.0.12 Path Traversal via Photo ZIP Download

Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated users with album-creation rights to include path traversal segments in archive entry names. Attackers can craft malicious album names containing directory traversal sequences that escape the intended dire…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:36.502Z. Updated 2026-08-31T18:52:19.022Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 01:52 WIB

Official record

HighPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82655

Admidio before 5.0.12 SQL Injection via relation_type_list

Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can bypass authentication by providing a dummy UUID in role_list and inject SQL through relation_type_list to extract…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:35.829Z. Updated 2026-08-31T16:37:20.330Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:37 WIB

Official record

CritPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82654

SiYuan before v3.8.1 Stored XSS via block name

SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions. Attackers can set a block's name to contain HTML/script tags that execute when another user views documents referencing or displaying that block.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:35.156Z. Updated 2026-09-01T14:07:50.048Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:07 WIB

Official record

CritPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82653

SiYuan before v3.8.1 Stored XSS via confirmDialog

SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute in users' browsers w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:34.477Z. Updated 2026-09-02T16:01:58.754Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated02 Sep 2026, 23:01 WIB

Official record

MedPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82652

SiYuan before v3.8.1 Information Disclosure via Publish Access

SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-view backlinks in publish mode. Anonymous readers can enumerate invisible content through these three listing mechanisms despite admin configuration marking content unlisted.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:33.793Z. Updated 2026-08-31T16:44:25.604Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:44 WIB

Official record

MedPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82651

SiYuan before v3.8.1 Missing Authorization via /history and /repo/diff

SiYuan before v3.8.1 does not apply the IsForbiddenAbsPath guard (introduced in GHSA-c8r8-95hg-mp34) to the /history/*path and /repo/diff/*path endpoints in kernel/server/serve.go. These routes require admin authentication but construct file paths independently, so an authenticated administrator can retrieve historical…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:33.112Z. Updated 2026-08-31T18:52:24.680Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 01:52 WIB

Official record

MedPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82650

SiYuan before v3.8.1 Path Traversal via /api/template/render

SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function (kernel/model/template.go), reachable via the POST /api/template/render endpoint (kernel/api/template.go). The endpoint restricts the supplied path only to the workspace directory (util.IsAbsPathInWorkspace) bu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:32.423Z. Updated 2026-08-31T16:42:46.656Z.

CVSS5.9v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:42 WIB

Official record

HighPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82649

SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path

SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element vulnerability in its NSIS installer, which invokes system executables such as TASKKILL by name rather than by absolute path. Because NSIS nsExec::Exec resolves these calls using a search path that in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:31.723Z. Updated 2026-09-01T14:05:54.992Z.

CVSS7v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:05 WIB

Official record

HighPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82648

WWBN AVideo SSRF Filter Bypass via NAT64 Hex Address

WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud metadata services and lo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:31.044Z. Updated 2026-09-02T16:00:31.665Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated02 Sep 2026, 23:00 WIB

Official record

MedPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82647

WWBN AVideo Cross-Site Request Forgery via sendEmail.json.php

WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows authenticated administrators to send mail from the site's contact address by bypassing origin checks and captcha validation. Attackers can craft a malicious web page that, when visited by an authenticated admin, sends emai…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:30.402Z. Updated 2026-08-31T16:45:13.152Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:45 WIB

Official record

MedPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82646

WWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.php

WWBN AVideo contains an unauthenticated reflected cross-site scripting vulnerability in the url2Embed.json.php endpoint that allows attackers to inject malicious scripts by supplying URLs with HTML metacharacters. Attackers can mint an encrypted evideo payload containing unescaped markup, then deliver it as a legitimat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:29.680Z. Updated 2026-08-31T18:52:31.984Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 01:52 WIB

Official record

CritPublished 30 Aug 2026, 21:33 WIB

CVE-2026-82645

AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token

AVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin/Live/view/Live_restreams/getLiveKey.json.php endpoint. Supplying a 'token' request parameter waives both the Live::canRestream() access gate and the restream ownership check, causing the endpoint to return any restream's stream_…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-30T14:33:28.997Z. Updated 2026-08-31T16:48:42.202Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated31 Aug 2026, 23:48 WIB

Official record