Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 3321–3340 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

MedPublished 23 Oct 2026, 00:18 WIB

CVE-2026-114609

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTP(S) URLs and raw local paths supplied through FPDF.image(), FPDF.write_html() HTML <img src> values, SVG <image href> or xlink:href values, and template image fields. This can cause…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T17:18:22.802Z. Updated 2026-10-29T02:19:57.646Z.

CVSS5.8v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 09:19 WIB

Official record

MedPublished 23 Oct 2026, 00:16 WIB

CVE-2026-54532

CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workflow is vulnerable to cache poisoning and OIDC token theft. A pull_request_target workflow checks out fork code using github.event.pull_request.head.sha or .head.ref. This gives attacker-controlled code…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 3321 to 3340 of 16156.First page Next page

Severity medium: primary CNA CVSS 6.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T17:16:38.540Z. Updated 2026-10-22T17:16:38.540Z.

CVSS6.9v3.1KEVNot listedEPSSPresentUpdated23 Oct 2026, 00:16 WIB

Official record

MedPublished 22 Oct 2026, 23:52 WIB

CVE-2026-115513

OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel

OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidate, Company, Contact, Job Order, or List name/title field, which is stored unsanitized and later rendered unescaped in the 'Recent' (MRU) nav…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:52:10.542Z. Updated 2026-10-23T13:28:36.941Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated23 Oct 2026, 20:28 WIB

Official record

MedPublished 22 Oct 2026, 23:50 WIB

CVE-2026-115416

Incorrect authorization checks in Amazon Athena engine version 3 query processing

Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement text query metadata from other AWS accounts. Query results, and data stored in Amazon S3 or other data sources, were not accessible through this is…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:50:18.238Z. Updated 2026-10-22T16:50:18.238Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated22 Oct 2026, 23:50 WIB

Official record

MedPublished 22 Oct 2026, 23:50 WIB

CVE-2026-114608

Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME

Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable files under PYLINT_HOME and loads those files with pickle.load on a later run. An attacker who can write to a shared, group-writable, or otherwise untrusted cache directory can replace a stats cache with…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:50:02.569Z. Updated 2026-10-29T11:49:18.315Z.

CVSS5.4v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 18:49 WIB

Official record

CritPublished 22 Oct 2026, 23:47 WIB

CVE-2026-114607

better-auth: OAuth state can be used as a Magic Link to sign in as another user

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in social or Generic OAuth p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:47:27.480Z. Updated 2026-10-23T15:02:40.820Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated23 Oct 2026, 22:02 WIB

Official record

MedPublished 22 Oct 2026, 23:35 WIB

CVE-2026-114606

draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate)

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFile actions operate on a …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:35:34.251Z. Updated 2026-10-22T16:35:34.251Z.

CVSS5.6v4.0KEVNot listedEPSSPresentUpdated22 Oct 2026, 23:35 WIB

Official record

CritPublished 22 Oct 2026, 23:32 WIB

CVE-2026-97631

Pre-boot RCE in EDK II PXE driver

EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality, Integrity, and Availability.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:32:27.619Z. Updated 2026-10-28T16:06:34.929Z.

CVSS9.5v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:06 WIB

Official record

MedPublished 22 Oct 2026, 23:32 WIB

CVE-2026-115502

DataApp links without login expose job information to other user in KNIME Business Hub

A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNIME Business Hub prior to 1.19.0. As workaround remove all "links without login" to DataApps.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:32:13.145Z. Updated 2026-10-23T09:31:02.963Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated23 Oct 2026, 16:31 WIB

Official record

HighPublished 22 Oct 2026, 23:27 WIB

CVE-2026-104068

JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitrary File Write via Backup Restore

JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup import and restore. Attackers can craft a backup archive cont…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:27:11.748Z. Updated 2026-10-27T01:30:31.057Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 08:30 WIB

Official record

HighPublished 22 Oct 2026, 23:25 WIB

CVE-2026-114605

dnspython dns.name.from_wire_parser() excessive CPU use

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application degradation, or denial o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:25:32.509Z. Updated 2026-10-29T02:19:02.339Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 09:19 WIB

Official record

HighPublished 22 Oct 2026, 23:12 WIB

CVE-2026-75507

GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in specified_rules repeatedly compares fields that share response names and recursively re-compares flattened inline fragments during the validation phase. The prior name…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:12:38.424Z. Updated 2026-10-23T21:08:40.217Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated24 Oct 2026, 04:08 WIB

Official record

HighPublished 22 Oct 2026, 23:10 WIB

CVE-2026-75508

GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1, the parser's max_tokens limit in Parser.advance_lexer counts only non-comment tokens returned after Lexer.lookahead skips comments. Each skipped comment is still allocated as a Token and retained through toke…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T16:10:17.124Z. Updated 2026-10-29T11:47:15.190Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 18:47 WIB

Official record

MedPublished 22 Oct 2026, 22:56 WIB

CVE-2026-115496

Workflow names may be leaked to unauthenticated users in KNIME Business Hub

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T15:56:48.222Z. Updated 2026-10-22T19:00:30.950Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Oct 2026, 02:00 WIB

Official record

UnscoredPublished 22 Oct 2026, 22:48 WIB

CVE-2026-114487

CVE-2026-114487

Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administrative user with a PAM license to create PAM sub-providers under existing AD providers via a crafted import request.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T15:48:35.922Z. Updated 2026-10-22T15:48:35.922Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Oct 2026, 22:48 WIB

Official record

MedPublished 22 Oct 2026, 22:43 WIB

CVE-2026-115494

CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub

A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction. This means the state of a resource could be changed without the user noticing. As a workaround, an API gateway for firewall in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T15:43:29.246Z. Updated 2026-10-22T19:00:31.097Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated23 Oct 2026, 02:00 WIB

Official record

UnscoredPublished 22 Oct 2026, 22:38 WIB

CVE-2026-114486

CVE-2026-114486

Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the gateway token.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T15:38:55.177Z. Updated 2026-10-22T15:38:55.177Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Oct 2026, 22:38 WIB

Official record

UnscoredPublished 22 Oct 2026, 22:37 WIB

CVE-2026-114485

CVE-2026-114485

Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with delegated user view permissions to obtain the MFA secrets of all users via the user list API response.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T15:37:16.071Z. Updated 2026-10-22T15:37:16.071Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Oct 2026, 22:37 WIB

Official record

MedPublished 22 Oct 2026, 22:29 WIB

CVE-2026-114603

OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api

OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentelemetry-api function TraceState.from_header in opentelemetry/trace/span.py, reached through TraceContextTextMapPropagator.extract, parses inbound W3C tracestate headers with an unbounded optional-whitespace regular expres…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T15:29:25.108Z. Updated 2026-10-29T02:17:42.817Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 09:17 WIB

Official record

MedPublished 22 Oct 2026, 22:25 WIB

CVE-2026-115454

Large tables in data apps can bring down execution services in KNIME Hub

An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side. This leads to intermittent unavailability of workflow execution functionality. A workaround is not possible.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T15:25:45.446Z. Updated 2026-10-22T19:00:31.252Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated23 Oct 2026, 02:00 WIB

Official record