Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 3381–3400 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

HighPublished 21 Aug 2026, 18:05 WIB

CVE-2026-77768

OpenPanel report.get Returns Any Report by Identifier Without Checking Project Access

The report.get procedure in packages/trpc/src/routers/report.ts accepted only a reportId and returned getReportById(reportId) directly. The enforceAccess middleware in packages/trpc/src/trpc.ts evaluates membership only when the input carries a projectId or organizationId key, so an input consisting of a reportId alone…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T11:05:14.998Z. Updated 2026-10-27T10:14:35.597Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 17:14 WIB

Official record

HighPublished 21 Aug 2026, 18:05 WIB

CVE-2026-77767

Reconmap Report Preview Endpoint Is Marked AllowAnonymous, Exposing Every Project and Client Organisation Without Authentication

Reconmap's API applies a fallback authorization policy in apps/api/app/Program.cs that requires an authenticated user holding the administrator role, so controllers without their own attribute reject anonymous callers. The report preview action in apps/api/app/Controllers/ReportsController.cs carries [AllowAnonymous] a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 3381 to 3400 of 12259.First page Next page

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T11:05:14.316Z. Updated 2026-08-21T13:51:15.264Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 20:51 WIB

Official record

HighPublished 21 Aug 2026, 18:05 WIB

CVE-2026-77763

JuiceFS Local Filestore Backend Joins Object Keys onto the Storage Root Without a Containment Check, Allowing Writes Outside the Configured Directory

The filestore backend in pkg/object/file.go, used for file:// stores and as a common juicefs sync destination, derived every operation's target from path(key), which returned either filepath.Join(d.root, key) or filepath.Clean(d.root + key) with no check that the result stayed beneath the root. Put, Get, Head, Delete, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T11:05:13.650Z. Updated 2026-09-24T14:19:38.547Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated24 Sep 2026, 21:19 WIB

Official record

CritPublished 21 Aug 2026, 18:05 WIB

CVE-2026-77086

SiYuan before v3.7.4 Path Traversal via packageName

SiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints, allowing authenticated administrators to perform path traversal via directory traversal sequences. Attackers with admin access can write arbitrary files to any location via install operations or recursively delet…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T11:05:12.989Z. Updated 2026-10-01T15:21:13.113Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:21 WIB

Official record

MedPublished 21 Aug 2026, 18:00 WIB

CVE-2026-77686

Dolibarr Account card.php improper authorization

A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php of the component Account Handler. This manipulation of the argument ID causes improper authorization. The attack may be initiated remotely. The exploit has been made available to the public and could b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T11:00:13.604Z. Updated 2026-08-21T21:44:44.037Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated22 Aug 2026, 04:44 WIB

Official record

HighPublished 21 Aug 2026, 17:51 WIB

CVE-2026-14208

Local Privilege Escalation via Insecure DLL Permissions in Remote Utilities Host <=7.7.3.0

Remote Utilities Host <=7.7.3.0 sets insecure ACLs on all DLL files in the installation directory (C:\Program Files (x86)\Remote Utilities - Host\), granting FULL CONTROL (F) to the built-in Everyone group (BUILTIN\Everyone, S-1-1-0). A Windows service running as NT AUTHORITY\SYSTEM loads DLLs from this directory. The …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T10:51:07.262Z. Updated 2026-08-21T11:54:27.254Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 18:54 WIB

Official record

MedPublished 21 Aug 2026, 17:47 WIB

CVE-2026-59296

Micrometer StatsD and Logging meter registries line-protocol and log injection vulnerability

Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a dangerous antipattern that general-purpose instrumentation should never perform. Micrometer 1.17.0 Micrometer 1.16.0 - 1.16.6 Micrometer 1.15.0 - 1.15.12 Micrometer 1.14.0 - 1.14.16 Micrometer 1.9.18 and ea…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T10:47:25.384Z. Updated 2026-08-27T17:57:53.054Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 00:57 WIB

Official record

CritPublished 21 Aug 2026, 17:15 WIB

CVE-2026-77683

Comfast CF-N1-S mbox-config system command injection

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit has been released to the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T10:15:08.099Z. Updated 2026-08-21T13:52:02.069Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 20:52 WIB

Official record

MedPublished 21 Aug 2026, 17:11 WIB

CVE-2026-77761

Cross-Document Parser State Contamination in misp-stix

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained per-document state that…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T10:11:54.840Z. Updated 2026-08-21T12:00:49.313Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 19:00 WIB

Official record

MedPublished 21 Aug 2026, 17:01 WIB

CVE-2026-59323

Micrometer Tracing Brave Bridge W3C Baggage propagation DoS vulnerability

An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of service (DoS) due to unbounded object allocation when extracting incoming baggage headers. Micrometer Tracing 1.7.0 Micrometer Tracing 1.6.0 - 1.6.6 Micrometer Tracing 1.5.0 - 1.5.12 Micrometer Tracing 1.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T10:01:05.831Z. Updated 2026-08-27T18:04:50.627Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 01:04 WIB

Official record

HighPublished 21 Aug 2026, 16:55 WIB

CVE-2026-77755

Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit() to handle several parsing and loading failures. Because SystemExit inherits from BaseException rather than Exception, these failures bypassed the exception …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T09:55:11.079Z. Updated 2026-08-21T12:09:16.956Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 19:09 WIB

Official record

LowPublished 21 Aug 2026, 16:52 WIB

CVE-2026-47079

Round-trip Corruption via Improper Entity Escaping in xml_builder

Inappropriate Encoding for Output Context vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, Cross-site Scripting. This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape_string/1, XmlBui…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T09:52:44.178Z. Updated 2026-08-21T12:19:47.179Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 19:19 WIB

Official record

LowPublished 21 Aug 2026, 16:51 WIB

CVE-2026-48590

Element and Attribute Names Injected Verbatim into XML Output in xml_builder

XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2, XmlBuilder.element/3. El…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T09:51:25.412Z. Updated 2026-08-21T12:25:33.127Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 19:25 WIB

Official record

LowPublished 21 Aug 2026, 16:49 WIB

CVE-2026-47080

CDATA Section Breakout via Unsanitised ]]> in xml_builder

XML Injection vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1. The escape/1 clause for {:cdata, data} in lib/x…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T09:49:34.772Z. Updated 2026-08-21T12:32:15.846Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 19:32 WIB

Official record

HighPublished 21 Aug 2026, 16:48 WIB

CVE-2026-77751

Path Traversal in MISP Object Template Resolution During STIX Import and Export in misp-stix library

A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export. MISP object names are passed to PyMISP's object-template resolution mechanism, which constructs a filesystem path by joining the configured MISP object-template directory, the object nam…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T09:48:20.168Z. Updated 2026-08-25T19:08:25.414Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:08 WIB

Official record

MedPublished 21 Aug 2026, 16:45 WIB

CVE-2026-77681

CodeAstro Online Job Portal update-profile.php unrestricted upload

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be us…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T09:45:08.456Z. Updated 2026-08-26T13:37:35.414Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated26 Aug 2026, 20:37 WIB

Official record

HighPublished 21 Aug 2026, 16:38 WIB

CVE-2026-47827

CVE-2026-47827 – BOSH CLI Powershell Injection

Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T09:38:30.839Z. Updated 2026-08-22T03:56:21.999Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated22 Aug 2026, 10:56 WIB

Official record

MedPublished 21 Aug 2026, 15:54 WIB

CVE-2026-77710

STIX2 Parser Confusion and Mass Assignment Allow Unauthorized MISP Attribute Metadata Injection in misp-stix library

A vulnerability in misp-stix could allow a crafted STIX document to influence security-sensitive MISP attribute metadata during import. The STIX import logic automatically selected between the internal MISP parser and the external STIX parser based on metadata contained in the STIX document itself. For STIX2, the pres…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T08:54:01.414Z. Updated 2026-08-21T17:19:40.158Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated22 Aug 2026, 00:19 WIB

Official record

UnscoredPublished 21 Aug 2026, 15:37 WIB

CVE-2026-63046

Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache InLong. Agent Installer's ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd() with no filtering or whitelist validation. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T08:37:57.457Z. Updated 2026-08-21T18:42:34.370Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Aug 2026, 01:42 WIB

Official record

UnscoredPublished 21 Aug 2026, 15:30 WIB

CVE-2026-47359

Apache CloudStack: OS Command Injection due to unsanitized mount command

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository API (available since 4.20.0.0) and updateBackupRepository API (introduced in 4.22.0.0) accept unsanitized command options for the backup rep…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-21T08:30:07.701Z. Updated 2026-08-26T14:17:31.535Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Aug 2026, 21:17 WIB

Official record