Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 4201–4220 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

HighPublished 20 Aug 2026, 02:26 WIB

CVE-2026-68900

Wekan: Stored XSS in HTML board exports through a card-title second parse

Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip() in client/lib/exportHTML.js read a card title and body through textContent, which decoded entity-encoded markup, and then interpolated titleText and allText into content.innerHTML in the exported index.html. A board member could s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:26:57.769Z. Updated 2026-08-19T19:43:28.851Z.

CVSS7.6v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 02:43 WIB

Official record

MedPublished 20 Aug 2026, 02:26 WIB

CVE-2026-16825

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:26:52.486Z. Updated 2026-08-21T16:14:10.023Z.

Showing 4201 to 4220 of 12259.First page Next page

CVSS4.2v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 23:14 WIB

Official record

UnscoredPublished 20 Aug 2026, 02:26 WIB

CVE-2026-76647

Leantime JSON-RPC API contains a missing authorization vulnerability

Leantime JSON-RPC API through version 3.9.0 contains a missing authorization vulnerability in the JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php. The dispatcher does not enforce authorization before invoking service-layer methods, allowing an authenticated user to call methods or act on resources outside…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:26:46.137Z. Updated 2026-08-27T15:49:51.556Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Aug 2026, 22:49 WIB

Official record

HighPublished 20 Aug 2026, 02:26 WIB

CVE-2026-16824

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounded recursion.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:26:31.788Z. Updated 2026-08-20T15:26:34.546Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:26 WIB

Official record

HighPublished 20 Aug 2026, 02:26 WIB

CVE-2026-68899

Wekan: File Upload MIME Type Validation Bypass — Stored XSS via Missing System Binary Fallback

Wekan is open source kanban built with Meteor. Prior to 9.90, isFileValid() in models/fileValidation.js used the Unix file command for content-based MIME detection, but detectMimeFromFile() silently returned undefined when that binary was unavailable and the validation fell back to the attacker-controlled fileObj.type …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:26:06.041Z. Updated 2026-08-21T21:49:01.859Z.

CVSS8.7v3.1KEVNot listedEPSSPresentUpdated22 Aug 2026, 04:49 WIB

Official record

CritPublished 20 Aug 2026, 02:25 WIB

CVE-2026-16822

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:25:58.695Z. Updated 2026-08-20T15:26:34.699Z.

CVSS9.3v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:26 WIB

Official record

CritPublished 20 Aug 2026, 02:25 WIB

CVE-2026-22306

Critical flaw impacting OZOLS ERP's automatic update channel

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel - OzolsSQL client update pat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:25:10.530Z. Updated 2026-08-26T19:29:42.941Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 02:29 WIB

Official record

HighPublished 20 Aug 2026, 02:24 WIB

CVE-2026-68561

Wekan: a low-privilege board member escalates to board admin and takes over a private board via the `sort` collection-allow rule

Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow({ update }) rule in server/permissions/boards.js called canUpdateBoardSort in server/lib/utils.js, which authorized any board member whenever fieldNames included sort. Because Meteor combines allow rules with OR semantics and applies …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:24:58.933Z. Updated 2026-08-25T13:57:28.356Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated25 Aug 2026, 20:57 WIB

Official record

HighPublished 20 Aug 2026, 02:23 WIB

CVE-2026-68560

Wekan:hell Injection in External Antivirus Scanner Path via asyncExec

Wekan is open source kanban built with Meteor. Prior to 9.75, models/fileValidation.js interpolated the uploaded fileObj.path into the administrator-configured externalCommandLine at its {file} placeholder and executed the result through asyncExec, which is promisify(exec) and invokes `/bin/sh -c`. On deployments with …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:23:45.761Z. Updated 2026-08-21T19:46:13.849Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated22 Aug 2026, 02:46 WIB

Official record

HighPublished 20 Aug 2026, 02:22 WIB

CVE-2026-68558

Wekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of CVE-2026-53446)

Wekan is open source kanban built with Meteor. From 8.36 until 9.74, the outgoing webhook Integration URL validator in models/integrations.js checked only the literal URL.hostname against regular expressions, so DNS names such as 169-254-169-254.nip.io passed that first-line check. The delivery path's fetchSafe guard a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:22:18.718Z. Updated 2026-08-19T19:44:48.392Z.

CVSS8.5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 02:44 WIB

Official record

MedPublished 20 Aug 2026, 02:20 WIB

CVE-2026-68559

Wekan: Broken access control in the Excel-export route (`/api/boards/:boardId/exportExcel`)

Wekan is open source kanban built with Meteor. From 9.57 until 9.74, the /api/boards/:boardId/exportExcel route in models/exportExcel.js called the asynchronous exporterExcel.canExport(user) authorization guard from models/server/ExporterExcel.js without awaiting it. The returned Promise was always truthy, so exporterE…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:20:32.150Z. Updated 2026-08-19T19:38:29.386Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 02:38 WIB

Official record

MedPublished 20 Aug 2026, 02:18 WIB

CVE-2026-67189

pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record

pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink in the administrator i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:18:50.158Z. Updated 2026-10-01T15:20:17.101Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:20 WIB

Official record

HighPublished 20 Aug 2026, 02:13 WIB

CVE-2026-63722

ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php

ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the terminal endpoint with…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:13:45.090Z. Updated 2026-10-01T15:20:13.656Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 22:20 WIB

Official record

HighPublished 20 Aug 2026, 02:13 WIB

CVE-2026-16933

Power System Integer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 through OP940.81 (Power HMC) is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service accou…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:13:26.703Z. Updated 2026-08-22T03:55:55.637Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated22 Aug 2026, 10:55 WIB

Official record

HighPublished 20 Aug 2026, 02:11 WIB

CVE-2026-17042

Power System Out-of-bounds Read

IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the hos…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:11:07.905Z. Updated 2026-08-19T19:46:38.034Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 02:46 WIB

Official record

HighPublished 20 Aug 2026, 02:08 WIB

CVE-2026-17063

Power System Incorrect Authorization

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state, potentially affecting th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:08:30.320Z. Updated 2026-08-20T15:21:43.570Z.

CVSS7.9v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:21 WIB

Official record

MedPublished 20 Aug 2026, 02:06 WIB

CVE-2026-75112

OTTO® Fleet Manager – Weak Password Hashing Configuration

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password hashes. If an attacker …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:06:52.411Z. Updated 2026-08-19T19:28:28.710Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 02:28 WIB

Official record

HighPublished 20 Aug 2026, 01:58 WIB

CVE-2026-19198

Akaunting 3.1.21 - Improper authorization in BulkActions handle dispatch

Akaunting 3.1.21 contains an authenticated improper authorization vulnerability in the common BulkActions dispatcher.This issue affects Akaunting: 3.1.21.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T18:58:01.093Z. Updated 2026-10-15T05:57:20.638Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated15 Oct 2026, 12:57 WIB

Official record

CritPublished 20 Aug 2026, 01:56 WIB

CVE-2026-16687

Power System Buffer Overflow

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker with network access can send the FSP a malformed request, allowing arbitrary code execution, giving the att…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T18:56:41.912Z. Updated 2026-08-22T03:56:02.086Z.

CVSS9.6v3.1KEVNot listedEPSSPresentUpdated22 Aug 2026, 10:56 WIB

Official record

CritPublished 20 Aug 2026, 01:52 WIB

CVE-2026-16835

Power System Improper Certificate Validation

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T18:52:26.786Z. Updated 2026-08-22T03:56:03.546Z.

CVSS9.6v3.1KEVNot listedEPSSPresentUpdated22 Aug 2026, 10:56 WIB

Official record