Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 4061–4080 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

HighPublished 20 Aug 2026, 04:34 WIB

CVE-2026-76259

Improper Privilege Management on the Management Port in Splunk Enterprise for Windows

In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all relevant data and syste…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:34:17.199Z. Updated 2026-08-27T16:24:55.649Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 23:24 WIB

Official record

MedPublished 20 Aug 2026, 04:34 WIB

CVE-2026-76258

Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who does not hold the "admin" or "power" Splunk roles could register an arbitrary companion app and cause Splunk Secure Gateway to forward mobile user requests, including …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 4061 to 4080 of 12259.First page Next page

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:34:16.596Z. Updated 2026-08-26T15:23:19.681Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated26 Aug 2026, 22:23 WIB

Official record

MedPublished 20 Aug 2026, 04:34 WIB

CVE-2026-76257

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who holds a Splunk role with permissions to list storage passwords but does not hold Splunk Secure Gateway administration privileges could access Mobile Device Management …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:34:15.984Z. Updated 2026-08-26T15:23:27.620Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated26 Aug 2026, 22:23 WIB

Official record

MedPublished 20 Aug 2026, 04:34 WIB

CVE-2026-76256

Information Exposure through REST API Endpoints in Splunk Secure Gateway

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could read sensitive Security Assertion Markup Language setup and instance settings information through Splunk Secure …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:34:15.368Z. Updated 2026-08-26T15:23:35.816Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated26 Aug 2026, 22:23 WIB

Official record

MedPublished 20 Aug 2026, 04:34 WIB

CVE-2026-76255

Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise

In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a user who does not hold the "admin" or "power" Splunk roles could trick another user into running arbitrary Search Processing Language (SPL) commands through the Data Model Editor using the permissions of the affected user. The commands could acce…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:34:14.772Z. Updated 2026-08-27T16:24:55.493Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 23:24 WIB

Official record

HighPublished 20 Aug 2026, 04:34 WIB

CVE-2026-76254

SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated user could cause another user to dispatch arbitrary Search Processing Language (SPL) pipelines from Dataset Explorer with the same privileges as that user, which can allow for access to all relevant data and system integr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:34:14.171Z. Updated 2026-08-27T16:24:55.017Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 23:24 WIB

Official record

HighPublished 20 Aug 2026, 04:34 WIB

CVE-2026-76253

Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could run arbitrary Search Processing Language (SPL) commands with the highest level of system privilege and read every credential stored in the credential store, which can allow for disc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:34:13.529Z. Updated 2026-08-27T16:24:54.855Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 23:24 WIB

Official record

MedPublished 20 Aug 2026, 04:34 WIB

CVE-2026-76252

Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who tricks another user into visiting a malicious web page could run unauthorized JavaScript in that user's browser. This could allow for unauthorized access to all relevant data available to that user and actions that affec…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:34:12.932Z. Updated 2026-08-26T15:23:42.214Z.

CVSS6.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2026, 22:23 WIB

Official record

HighPublished 20 Aug 2026, 04:34 WIB

CVE-2026-76251

Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud

In Splunk Enterprise versions below 10.4.2, 10.2.6, and 10.0.9, a user who does not hold the "admin" or "power" Splunk roles could cause the Splunk App for Splunk Observability Cloud to forward requests to Splunk Observability Cloud, including the Splunk Observability Cloud access token stored for the app. With this ac…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:34:12.364Z. Updated 2026-08-26T15:23:52.622Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated26 Aug 2026, 22:23 WIB

Official record

MedPublished 20 Aug 2026, 04:30 WIB

CVE-2026-59992

Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the first-party production media adapters pass attacker-controlled object keys to storage SDK upload and delete operations without enforcing the operator…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:30:51.975Z. Updated 2026-08-21T16:48:12.641Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 23:48 WIB

Official record

CritPublished 20 Aug 2026, 04:30 WIB

CVE-2026-76589

TRENDnet TEW-755AP mycli FUN_401000 stack-based overflow

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:30:09.382Z. Updated 2026-08-25T14:18:31.333Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:18 WIB

Official record

HighPublished 20 Aug 2026, 04:22 WIB

CVE-2025-36254

DS8900F and DS8A00 Authentication Bypass

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service.

Excerpt language: en.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:22:52.067Z. Updated 2026-08-20T16:27:36.660Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:27 WIB

Official record

HighPublished 20 Aug 2026, 04:22 WIB

CVE-2025-36255

DS8900F and DS8A00 Privilege Escalation

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:22:44.160Z. Updated 2026-08-20T16:27:36.807Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:27 WIB

Official record

MedPublished 20 Aug 2026, 04:22 WIB

CVE-2025-36398

DS8900F and DS8A00 Information Disclosure

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's command history due to an externally controlled filename.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:22:34.031Z. Updated 2026-08-20T16:27:36.957Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:27 WIB

Official record

MedPublished 20 Aug 2026, 04:17 WIB

CVE-2026-69550

Windows App for Mac Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:17:18.285Z. Updated 2026-10-28T20:07:01.451Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 03:07 WIB

Official record

MedPublished 20 Aug 2026, 04:08 WIB

CVE-2026-14978

Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:08:16.154Z. Updated 2026-08-20T15:20:13.504Z.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:20 WIB

Official record

LowPublished 20 Aug 2026, 04:05 WIB

CVE-2026-11617

Tanium addressed a compression bomb vulnerability in Findings.

Tanium addressed a compression bomb vulnerability in Findings.

Excerpt language: en.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:05:20.781Z. Updated 2026-08-20T15:26:32.910Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:26 WIB

Official record

LowPublished 20 Aug 2026, 04:05 WIB

CVE-2026-75476

Tanium addressed a compression bomb vulnerability in Threat Response.

Tanium addressed a compression bomb vulnerability in Threat Response.

Excerpt language: en.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:05:08.027Z. Updated 2026-08-20T15:26:33.106Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:26 WIB

Official record

MedPublished 20 Aug 2026, 04:02 WIB

CVE-2026-14514

Reliable Scalable Cluster Technology Denial-of-Service

IBM Reliable Scalable Cluster Technology (RSCT) 3.0 could allow a remote attacker to cause a denial of service by sending a specially crafted request due improper input validation.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:02:33.045Z. Updated 2026-08-20T14:07:31.122Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 21:07 WIB

Official record

CritPublished 20 Aug 2026, 04:00 WIB

CVE-2026-75595

Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause an IndexOutOfBoundsEx…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T21:00:27.627Z. Updated 2026-08-20T14:06:16.963Z.

CVSS9.1v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 21:06 WIB

Official record