Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 6,236 published records · 10 KEV · 6,236 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

6,236 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4517.2%
High2,14734%
Med2,43639%
Low2253.6%
None90.14%
Legacy00.00%
Unscored96816%

Matching records by UTC month

Mar 266,236

Signal coverage

KEV-listed: 10
With a forecast: 6,236
Unknown date: 0
Unscored severity: 968

Share of cohort: KEV 0.16% · forecast 100% · unscored 16%.

Showing 3081–3100 of 6,236By severity band: Critical · 9.0–10.0 451, High · 7.0–8.9 2,147, Medium · 4.0–6.9 2,436, Low · 0.1–3.9 225, None · scored 0.0 9, Legacy · v2 only 0, Unscored · no CNA metric 968

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2025-55045

CVE-2025-55045

The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF. The vulnerable cUsers.updateAddress function lacks CSRF token validation, enabling malicious websites to forge requests that add, modify, or delete user addresses when an authenticated …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-19T13:54:33.731Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Mar 2026, 20:54 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2025-55046

CVE-2025-55046

MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack. The vulnerable cTrash.empty function lacks CSRF token validation, enabling malicious websites to forge requests that irreversibly delete all tra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 3081 to 3100 of 6236.First page Next page

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-19T13:56:51.272Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Mar 2026, 20:56 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2025-58112

CVE-2025-58112

Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized reports via raw SQL queries in an upload of a .rdl (Report Definition Language) file; this is then processed by the SQL Server Reporting Service. An account with the privilege Add Reporting Services Reports ca…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-19T14:42:28.552Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Mar 2026, 21:42 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2025-67829

CVE-2025-67829

Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-19T14:01:44.039Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Mar 2026, 21:01 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2025-67830

CVE-2025-67830

Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-19T14:02:55.740Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Mar 2026, 21:02 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-26740

CVE-2026-26740

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-07-23T12:08:00.184Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Jul 2026, 19:08 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-29856

CVE-2026-29856

An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service (ReDoS) via a crafted input.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-19T14:19:23.842Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Mar 2026, 21:19 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-29858

CVE-2026-29858

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensitive information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-19T14:24:44.583Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Mar 2026, 21:24 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-29859

CVE-2026-29859

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-23T15:16:36.471Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Mar 2026, 22:16 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-30048

CVE-2026-30048

A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when the chat history is re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-19T14:31:35.234Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Mar 2026, 21:31 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-30345

CVE-2026-30345

A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitrary files outside the intended directories via supplying a crafted import.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-04-29T14:33:47.686Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Apr 2026, 21:33 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-30695

CVE-2026-30695

A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7, and XIO / i-door / i-door+. The vulnerability is caused by improper sanitization of user-supplied input in the dirBrowse parameter of the /file_manager.c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-07-05T16:14:16.967Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 23:14 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-30701

CVE-2026-30701

The web interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) contains hardcoded credential disclosure mechanisms (in the form of Server Side Include) within multiple server-side web pages, including login.shtml and settings.shtml. These pages embed server-side execution directives that dynamically re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-23T15:56:53.466Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Mar 2026, 22:56 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-30702

CVE-2026-30702

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface. The login page does not properly enforce session validation, allowing attackers to bypass authentication by directly accessing restricted web application endpoints through forced brow…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-23T15:56:47.034Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Mar 2026, 22:56 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-30703

CVE-2026-30703

A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02). The adm.cgi endpoint improperly sanitizes user-supplied input provided to a command-related parameter in the sysCMD functionality.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-23T15:56:39.241Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Mar 2026, 22:56 WIB

Official record

UnscoredPublished 18 Mar 2026, 07:00 WIB

CVE-2026-30704

CVE-2026-30704

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hardware pads on the PCB

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-18T00:00:00.000Z. Updated 2026-03-19T14:35:45.872Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Mar 2026, 21:35 WIB

Official record

MedPublished 18 Mar 2026, 06:59 WIB

CVE-2026-27978

Next.js: null origin can bypass Server Actions CSRF checks

Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, `origin: null` was treated as a "missing" origin during Server Action CSRF validation. As a result, requests from opaque contexts (such as sandboxed iframes) could bypass origin verification in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-17T23:59:22.600Z. Updated 2026-03-18T19:48:04.820Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated19 Mar 2026, 02:48 WIB

Official record

LowPublished 18 Mar 2026, 06:56 WIB

CVE-2026-27977

Next.js: null origin can bypass dev HMR websocket CSRF checks

Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, in `next dev`, cross-site protection for internal websocket endpoints could treat `Origin: null` as a bypass case even if `allowedDevOrigins` is configured, allowing privacy-sensitive/opaque co…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-17T23:56:24.631Z. Updated 2026-03-18T19:56:16.843Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated19 Mar 2026, 02:56 WIB

Official record

MedPublished 18 Mar 2026, 06:51 WIB

CVE-2026-27895

LAM has incorrect regular expression in PDF export component that allows user to upload files of any type

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, the PDF export component does not correctly validate uploaded file extensions. This way any file type (including .php files) can be uploaded. With GHSA-w7xq-vjr3-p9cf, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-17T23:51:26.501Z. Updated 2026-03-18T19:55:14.059Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated19 Mar 2026, 02:55 WIB

Official record

HighPublished 18 Mar 2026, 06:48 WIB

CVE-2026-27894

LAM has Authenticated Local File Inclusion (LFI) in PDF export

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with GHSA-88hf-2cjm-m9g8 th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-17T23:48:06.530Z. Updated 2026-03-18T19:54:13.831Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated19 Mar 2026, 02:54 WIB

Official record