Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 4561–4580 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

HighPublished 07 Apr 2026, 22:47 WIB

CVE-2026-35534

ChurchCRM has Stored XSS in PersonView.php via Facebook Field Attribute Injection

ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripting vulnerability exists in PersonView.php due to incorrect use of sanitizeText() as an output sanitizer for HTML attribute context. The function only strips HTML tags, it does not escape quote characters allowing an attacke…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:47:44.342Z. Updated 2026-04-09T16:19:01.737Z.

CVSS7.6v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 23:19 WIB

Official record

MedPublished 07 Apr 2026, 22:26 WIB

CVE-2026-35571

Emissary has Stored XSS via Navigation Template Link Injection

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, Mustache navigation templates interpolated configuration-controlled link values directly into href attributes without URL scheme validation. An administrator who could modify the navItems configuration could inject javascript: URIs, enabling stored c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 4561 to 4580 of 5813.First page Next page

Severity medium: primary CNA CVSS 4.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:26:30.391Z. Updated 2026-04-08T14:57:05.392Z.

CVSS4.8v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 21:57 WIB

Official record

HighPublished 07 Apr 2026, 22:23 WIB

CVE-2026-35526

Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions

Strawberry GraphQL is a library for creating GraphQL APIs. Prior to 0.312.3, Strawberry GraphQL's WebSocket subscription handlers for both the graphql-transport-ws and legacy graphql-ws protocols allocate an asyncio.Task and associated Operation object for every incoming subscribe message without enforcing any limit on…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:23:36.548Z. Updated 2026-04-08T14:55:58.026Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 21:55 WIB

Official record

UnscoredPublished 07 Apr 2026, 22:22 WIB

CVE-2026-4931

CVE-2026-4931

Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:22:36.700Z. Updated 2026-04-08T14:45:03.884Z.

CVSS—KEVNot listedEPSSPresentUpdated08 Apr 2026, 21:45 WIB

Official record

HighPublished 07 Apr 2026, 22:20 WIB

CVE-2026-35521

Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.hosts Newline Injection

FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution (RCE) vulnerability in the DHCP hosts configuration parameter (dhcp.hosts). This vulnerability allows an authenticated attacker to in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:20:26.583Z. Updated 2026-04-07T18:21:43.428Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 01:21 WIB

Official record

UnscoredPublished 07 Apr 2026, 22:19 WIB

CVE-2026-33816

CVE-2026-33816 in github.com/jackc/pgx

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:19:24.529Z. Updated 2026-09-11T12:09:13.238Z.

CVSS—KEVNot listedEPSSPresentUpdated11 Sep 2026, 19:09 WIB

Official record

UnscoredPublished 07 Apr 2026, 22:19 WIB

CVE-2026-33815

CVE-2026-33815 in github.com/jackc/pgx

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:19:24.344Z. Updated 2026-09-17T12:04:28.748Z.

CVSS—KEVNot listedEPSSPresentUpdated17 Sep 2026, 19:04 WIB

Official record

HighPublished 07 Apr 2026, 22:19 WIB

CVE-2026-35520

Pi-hole FTL affected by Remote Code Execution (RCE) via dhcp.leaseTime Newline Injection

FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution (RCE) vulnerability in the DHCP lease time configuration parameter (dhcp.leaseTime). This vulnerability allows an authenticated attac…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:19:21.875Z. Updated 2026-04-09T14:35:45.884Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 21:35 WIB

Official record

HighPublished 07 Apr 2026, 22:18 WIB

CVE-2026-35519

Pi-hole FTL affected by Remote Code Execution (RCE) via dns.hostRecord Newline Injection

FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution (RCE) vulnerability in the DNS host record configuration parameter (dns.hostRecord). This vulnerability allows an authenticated attac…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:18:27.377Z. Updated 2026-04-09T16:19:08.569Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 23:19 WIB

Official record

MedPublished 07 Apr 2026, 22:17 WIB

CVE-2026-1079

A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension.

A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension. A bad actor could create a website that contains malicious code that targets PBE. The vulnerability could occur if a user navigates to this website. T…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:17:47.205Z. Updated 2026-04-07T20:06:55.833Z.

CVSS6v4.0KEVNot listedEPSSPresentUpdated08 Apr 2026, 03:06 WIB

Official record

HighPublished 07 Apr 2026, 22:17 WIB

CVE-2026-35518

Pi-hole FTL affected by Remote Code Execution (RCE) via dns.cnameRecords Newline Injection

FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution (RCE) vulnerability in the DNS CNAME records configuration parameter (dns.cnameRecords). This vulnerability allows an authenticated a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:17:39.977Z. Updated 2026-04-08T14:55:05.699Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 21:55 WIB

Official record

HighPublished 07 Apr 2026, 22:16 WIB

CVE-2026-35517

Pi-hole FTL affected by Remote Code Execution (RCE) via dns.upstreams Newline Injection

FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hole FTL engine contains a Remote Code Execution (RCE) vulnerability in the upstream DNS servers configuration parameter (dns.upstreams). This vulnerability allows an authenticated a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:16:02.955Z. Updated 2026-04-07T18:19:50.497Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 01:19 WIB

Official record

MedPublished 07 Apr 2026, 22:14 WIB

CVE-2026-35516

LinkAce has SSRF via CheckLinksCommand - Link URL Update Bypasses laravel-html-meta Protection

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs. An authenticated user can read responses from internal services (AWS IMDSv1, cloud metadata, internal APIs) by creating a link with a public URL and then updat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:14:45.891Z. Updated 2026-04-09T14:36:27.061Z.

CVSS5v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 21:36 WIB

Official record

UnscoredPublished 07 Apr 2026, 22:14 WIB

CVE-2025-24819

A Relative Path Traversal vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:14:42.719Z. Updated 2026-04-07T17:56:15.517Z.

CVSS—KEVNot listedEPSSPresentUpdated08 Apr 2026, 00:56 WIB

Official record

UnscoredPublished 07 Apr 2026, 22:13 WIB

CVE-2025-24818

An OS Command Injection vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Log Search application.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:13:22.492Z. Updated 2026-04-07T20:11:29.811Z.

CVSS—KEVNot listedEPSSPresentUpdated08 Apr 2026, 03:11 WIB

Official record

UnscoredPublished 07 Apr 2026, 22:09 WIB

CVE-2025-24817

An OS Command Injection vulnerability in Nokia MantaRay NM

Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Symptom Collector application.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:09:47.125Z. Updated 2026-04-08T16:15:12.963Z.

CVSS—KEVNot listedEPSSPresentUpdated08 Apr 2026, 23:15 WIB

Official record

MedPublished 07 Apr 2026, 22:06 WIB

CVE-2026-35515

@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')

Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStream._transform() interpolates message.type and message.id directly into Server-Sent Events text protocol output without sanitizing newline characters (\r, \n). Since the SSE protocol treats both \r and \n as field delimi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:06:10.619Z. Updated 2026-04-07T15:58:37.067Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated07 Apr 2026, 22:58 WIB

Official record

HighPublished 07 Apr 2026, 22:04 WIB

CVE-2026-1078

An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work with Google Chrome or Microsoft Edge.

An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work with Google Chrome or Microsoft Edge. A bad actor could create a website that includes malicious code. The vulnerability could occur if a Robot Runtime us…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:04:32.765Z. Updated 2026-04-07T19:59:49.928Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated08 Apr 2026, 02:59 WIB

Official record

MedPublished 07 Apr 2026, 22:03 WIB

CVE-2026-35492

Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a partition ID could cause…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:03:45.893Z. Updated 2026-04-08T14:50:03.601Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 21:50 WIB

Official record

MedPublished 07 Apr 2026, 22:00 WIB

CVE-2026-35491

Pi-hole FTL: CLI API sessions can import Teleporter archives and modify configuration

FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, Pi-hole FTL supports a CLI password feature (webserver.api.cli_pw) that creates “CLI” API sessions intended to be read-only for configuration changes. While /api/config correctly blocks CLI…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-07T15:00:11.079Z. Updated 2026-04-07T17:52:48.043Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 00:52 WIB

Official record