Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 19 KEV · 15,829 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 19
With a forecast: 15,829
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 98% · unscored 22%.

Showing 321–340 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

LowPublished 29 Oct 2026, 15:03 WIB

CVE-2026-115303

Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping

The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-validate submitted field values before concatenating them into outgoing email headers when a form is configured to map a submitted field into its Reply-To, From or Cc header, allowing unauthenticated users to inject arbit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T08:03:46.351Z. Updated 2026-10-29T10:45:50.346Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:45 WIB

Official record

HighPublished 29 Oct 2026, 14:40 WIB

CVE-2025-62841

Hard-coded Cryptographic Key #2

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 321 to 340 of 16156.First page Next page

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T07:40:02.766Z. Updated 2026-10-29T14:16:06.907Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 21:16 WIB

Official record

HighPublished 29 Oct 2026, 14:39 WIB

CVE-2025-62839

Hard-coded Cryptographic Key #1

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T07:39:53.736Z. Updated 2026-10-29T14:17:58.115Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 21:17 WIB

Official record

MedPublished 29 Oct 2026, 13:22 WIB

CVE-2026-118030

Keycloak-services: keycloak-services: hotp race condition allows single otp code reuse across concurrent logins

A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and access management services. The issue occurs because the system validates a one-time password and updates its internal counter in two separate steps without proper locking. An attacker with a users pass…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:22:11.871Z. Updated 2026-10-29T14:18:44.865Z.

CVSS4.2v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 21:18 WIB

Official record

MedPublished 29 Oct 2026, 13:22 WIB

CVE-2026-117859

Keycloak-services: keycloak-services: par single-use bypass via flow restart

A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue occurs when an authentication flow is restarted, which incorrectly clears the internal markers used to track PAR consumption while leaving the request active. This allows an attacker to reuse the same a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:22:11.710Z. Updated 2026-10-29T06:22:11.710Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 13:22 WIB

Official record

MedPublished 29 Oct 2026, 13:22 WIB

CVE-2026-117688

Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration

A flaw was found in the client registration component of Keycloak, an open-source identity and access management solution. When a vault provider is used to store sensitive information, an authenticated client owner can use a specially crafted reference to trick the system into revealing secrets. By updating a client se…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:22:06.480Z. Updated 2026-10-29T06:22:06.480Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 13:22 WIB

Official record

MedPublished 29 Oct 2026, 13:22 WIB

CVE-2026-117548

389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service

A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema alias name (such as "commonName") instead of its canonical name (such as "cn") as the new relative distinguished name. An authenticated attacker with the ModifyDN (rename) permission …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:22:06.328Z. Updated 2026-10-29T06:22:06.328Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 13:22 WIB

Official record

MedPublished 29 Oct 2026, 13:22 WIB

CVE-2026-117627

Keycloak-services: keycloak-services: jwt authorization grant bypasses identity provider login restrictions

A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Google identity provider is configured with specific login restrictions, such as claim filtering, these checks are correctly applied during standard browser logins but are skipped during the JWT-based gran…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:22:03.427Z. Updated 2026-10-29T06:22:03.427Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 13:22 WIB

Official record

HighPublished 29 Oct 2026, 13:07 WIB

CVE-2026-114488

Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding

A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level authentication, allowing a pre-auth attacker on the port 3528 to impersonate any princi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:07:33.732Z. Updated 2026-10-29T06:07:33.732Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 13:07 WIB

Official record

MedPublished 29 Oct 2026, 13:07 WIB

CVE-2026-19610

Wildfly-platform-mbean: wildfly-platform-mbean: rbac sensitive attribute read bypass for platform runtimemxbean

A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and configurations. The issue occurs because the handler for the read-resource operation on the runtime management resource fails to perform required Role-Based Access Control (RBAC) checks. This allows …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:07:32.569Z. Updated 2026-10-29T14:24:04.416Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 21:24 WIB

Official record

HighPublished 29 Oct 2026, 13:07 WIB

CVE-2026-15564

Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization

Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects and achieve deserialization, if the target EJB allows untyped method parameters, and depending on the potential gad…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:07:28.359Z. Updated 2026-10-29T06:07:28.359Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 13:07 WIB

Official record

UnscoredPublished 29 Oct 2026, 13:00 WIB

CVE-2026-86794

Community Events 1.4.9 - 1.5.9 - Unauthenticated Stored XSS via Event Submission Form

The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when processing public event submissions, and does not escape several of the submitted values before outputting them in the administration dashboard and on the public calendar, allowing unauthenticated users to inject arbitra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:00:26.534Z. Updated 2026-10-29T10:56:05.527Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:56 WIB

Official record

UnscoredPublished 29 Oct 2026, 13:00 WIB

CVE-2026-85007

YT Player < 2.1.4 - Contributor+ Missing Authorization via ytp_ajax

The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on its player-preset AJAX handler, allowing users with the Contributor role and above to read the site-wide player-preset configuration, and in versions before 2.1.1 to modify and delete it as well.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:00:26.360Z. Updated 2026-10-29T10:46:16.022Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:46 WIB

Official record

UnscoredPublished 29 Oct 2026, 13:00 WIB

CVE-2026-115259

Photo Engine < 6.6.0 - Author+ Arbitrary Content Modification via IDOR

The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.0 does not have proper authorization checks when updating post data through one of its REST API routes in all versions up to, and including, 6.5.8. This makes it possible for authenticated attackers, with Author-level access and above, to modify…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:00:26.186Z. Updated 2026-10-29T10:56:05.733Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:56 WIB

Official record

UnscoredPublished 29 Oct 2026, 13:00 WIB

CVE-2026-115245

Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload

The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoofable client-supplied content type, allowing unauthenticated attackers to upload arbitrary files, including PHP, which can lead to remote code execution.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:00:26.002Z. Updated 2026-10-29T10:56:05.928Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:56 WIB

Official record

UnscoredPublished 29 Oct 2026, 13:00 WIB

CVE-2026-114270

GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure

The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing, allowing unauthenticated users to disclose the content and custom fields of published listings that are protected by a post password.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:00:25.828Z. Updated 2026-10-29T10:56:06.088Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:56 WIB

Official record

UnscoredPublished 29 Oct 2026, 13:00 WIB

CVE-2026-113617

Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal

The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions, such as subscribers, to read arbitrary files (including ones containing the database credentials) and delete arbitrary files …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:00:25.656Z. Updated 2026-10-29T10:56:06.251Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:56 WIB

Official record

UnscoredPublished 29 Oct 2026, 13:00 WIB

CVE-2026-113616

LogixFast Auth < 1.0.4 - Unauthenticated Account Takeover via Password Reset

The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved account's own email address, mailing it to the address supplied in the request instead, allowing unauthenticated attackers to reset any user's password, including an administrator's, and take over the acco…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:00:25.482Z. Updated 2026-10-29T10:56:06.421Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:56 WIB

Official record

UnscoredPublished 29 Oct 2026, 13:00 WIB

CVE-2026-111739

Two Factor Authentication < 1.17.0 and All-In-One Security (AIOS) < 5.5.0 - Subscriber+ 2FA Bypass via 'creds_user_id' Parameter

The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Security (AIOS) WordPress plugin before 5.5.0 do not bind the account whose two-factor code is verified to the account being authenticated, allowing an attacker who knows a victim's password and holds their own two-factor-enabled account to satis…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:00:25.291Z. Updated 2026-10-29T10:56:06.577Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:56 WIB

Official record

UnscoredPublished 29 Oct 2026, 13:00 WIB

CVE-2026-110983

WP Photo Album Plus < 9.3.04.004 - Photo Comment Deletion via CSRF

The WP Photo Album Plus WordPress plugin before 9.3.04.004 does not verify the origin or a security token for one of its comment-management requests, allowing attackers to delete photo comments by tricking a logged-in user who holds comment-moderation rights into loading a crafted page.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-29T06:00:25.116Z. Updated 2026-10-29T10:56:06.731Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Oct 2026, 17:56 WIB

Official record