Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 3021–3040 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

HighPublished 14 Apr 2026, 20:56 WIB

CVE-2026-4345

Stored Cross-Site Scripting (XSS) Vulnerability in Design Name

A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T13:56:22.111Z. Updated 2026-04-15T03:58:16.255Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated15 Apr 2026, 10:58 WIB

Official record

HighPublished 14 Apr 2026, 20:47 WIB

CVE-2026-4369

Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name

A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 3021 to 3040 of 5813.First page Next page

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T13:47:01.968Z. Updated 2026-04-15T03:58:17.421Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated15 Apr 2026, 10:58 WIB

Official record

CritPublished 14 Apr 2026, 20:13 WIB

CVE-2025-8095

Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge

The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform. It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applications. OECH1 encodings should be considered exploitable and immediately replaced by any other supported prefix encoding, al…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T13:13:43.739Z. Updated 2026-04-15T03:58:13.601Z.

CVSS9.1v4.0KEVNot listedEPSSPresentUpdated15 Apr 2026, 10:58 WIB

Official record

HighPublished 14 Apr 2026, 20:12 WIB

CVE-2025-7389

Unauthorized Arbitrary File Read via RMI in AdminServer Interface

A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of the AdminServer process itself. The delegated authority of the AdminServer could allow its users the ability to read arbitrary files on the h…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T13:12:54.559Z. Updated 2026-04-14T14:04:52.165Z.

CVSS8.2v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 21:04 WIB

Official record

HighPublished 14 Apr 2026, 19:07 WIB

CVE-2026-2450

CVE-2026-2450

.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant Privilege Access: through 1.5.0.

Excerpt language: en.

Severity high: primary CNA CVSS 7.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T12:07:44.265Z. Updated 2026-04-14T13:14:16.443Z.

CVSS7.4v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 20:14 WIB

Official record

CritPublished 14 Apr 2026, 18:56 WIB

CVE-2026-2449

CVE-2026-2449

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant Privilege Access: through 1.5.0.

Excerpt language: en.

Severity critical: primary CNA CVSS 9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T11:56:04.741Z. Updated 2026-04-14T13:14:16.593Z.

CVSS9v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 20:14 WIB

Official record

UnscoredPublished 14 Apr 2026, 18:26 WIB

CVE-2026-24069

Improper Enforcement of Disabled Accounts in WebUI SSO in Kiuwan SAST

Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application. Kiuwan Cloud was affected, and Kiuwan SAST on-premise (KOP) was affected before 2.8.2509.4.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T11:26:55.274Z. Updated 2026-04-14T18:24:36.801Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Apr 2026, 01:24 WIB

Official record

HighPublished 14 Apr 2026, 17:59 WIB

CVE-2026-2332

HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funky-chunks.html * https://w4ke.info/2025/10/29/funky-chunks-2.html Jetty terminates chunk extension parsing at \r\n i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T10:59:10.193Z. Updated 2026-09-14T12:04:28.913Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated14 Sep 2026, 19:04 WIB

Official record

MedPublished 14 Apr 2026, 17:23 WIB

CVE-2025-13822

Authentication bypass in MCPHub

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T10:23:49.910Z. Updated 2026-04-14T13:14:16.888Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 20:14 WIB

Official record

MedPublished 14 Apr 2026, 15:40 WIB

CVE-2026-33892

CVE-2026-33892

A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), Industrial Edge Management Virtual (All versions >= V2.2.0 < V2.8.0). Affected management systems do not properly enforce user authentication…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T08:40:46.807Z. Updated 2026-04-14T13:46:34.636Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 20:46 WIB

Official record

HighPublished 14 Apr 2026, 15:40 WIB

CVE-2026-27668

CVE-2026-27668

A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8). User Administrators are allowed to administer groups they belong to. This could allow an authenticated User Administrator to escalate their own privileges and grant themselves access to any device grou…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T08:40:45.661Z. Updated 2026-04-14T12:58:05.664Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 19:58 WIB

Official record

HighPublished 14 Apr 2026, 15:40 WIB

CVE-2026-25654

CVE-2026-25654

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affected products do not properly validate user authorization when processing password reset requests. This could allow an authenticated remote attacker to bypass authorization checks, leading to the ability to reset the password of any arbitra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T08:40:41.053Z. Updated 2026-04-14T13:46:23.821Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 20:46 WIB

Official record

MedPublished 14 Apr 2026, 15:40 WIB

CVE-2026-24032

CVE-2026-24032

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component. This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized acce…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T08:40:39.853Z. Updated 2026-04-14T13:18:01.056Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 20:18 WIB

Official record

MedPublished 14 Apr 2026, 15:40 WIB

CVE-2025-40745

CVE-2025-40745

A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), Simcenter STAR-CCM+ (All versions < V2602), Solid Edge SE2025 (All versions < V225.0 Update 13), Solid Edge SE2026 (All versions < V226.0 Updat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T08:40:38.637Z. Updated 2026-04-14T13:38:29.751Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated14 Apr 2026, 20:38 WIB

Official record

UnscoredPublished 14 Apr 2026, 15:38 WIB

CVE-2026-31923

Apache APISIX: Openid-connect `tls_verify` field is disabled by default

Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. This can occur due to `ssl_verify` in openid-connect plugin configuration being set to false by default. This issue affects Apache APISIX: from 0.7 through 3.15.0. Users are recommended to upgrade to version 3.16.0, which fixes the issue.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T08:38:59.039Z. Updated 2026-04-14T18:16:34.559Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Apr 2026, 01:16 WIB

Official record

UnscoredPublished 14 Apr 2026, 15:09 WIB

CVE-2026-33929

Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples. This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7. Users are recommended to update to version 2.0.37 or 3.0.8 once availab…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T08:09:39.517Z. Updated 2026-04-14T19:50:07.000Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Apr 2026, 02:50 WIB

Official record

UnscoredPublished 14 Apr 2026, 15:08 WIB

CVE-2026-31924

Apache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTP

Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX. tencent-cloud-cls log export uses plaintext HTTP This issue affects Apache APISIX: from 2.99.0 through 3.15.0. Users are recommended to upgrade to version 3.16.0, which fixes the issue.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T08:08:05.615Z. Updated 2026-04-14T19:51:55.994Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Apr 2026, 02:51 WIB

Official record

UnscoredPublished 14 Apr 2026, 15:06 WIB

CVE-2026-31908

Apache APISIX: forward auth plugin allows header injection

Header injection vulnerability in Apache APISIX. The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0. Users are recommended to upgrade to version 3.16.0, which fixes the issue.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T08:06:18.026Z. Updated 2026-04-16T12:06:00.176Z.

CVSS—KEVNot listedEPSSPresentUpdated16 Apr 2026, 19:06 WIB

Official record

MedPublished 14 Apr 2026, 14:43 WIB

CVE-2026-4109

Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure

The Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the get_item_permissions_check() function in all versions up to, and including, 4.1.8. This makes it possible for authenticated attacke…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T07:43:03.588Z. Updated 2026-04-14T13:00:42.566Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated14 Apr 2026, 20:00 WIB

Official record

MedPublished 14 Apr 2026, 13:43 WIB

CVE-2026-2582

Germanized for WooCommerce <= 3.20.5 - Unauthenticated Arbitrary Shortcode Execution

The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This ma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-14T06:43:52.199Z. Updated 2026-04-14T14:04:52.319Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated14 Apr 2026, 21:04 WIB

Official record