Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 5301–5320 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

MedPublished 03 Apr 2026, 11:30 WIB

CVE-2026-5453

Rico só vantagem pra investir App br.com.rico.mobile SegmentSettingsModule.java hard-coded key

A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android. This issue affects some unknown processing of the file br/com/rico/mobile/di/SegmentSettingsModule.java of the component br.com.rico.mobile. Such manipulation of the argument SEGMENT_WRITE_KEY leads to use of hard-coded …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T04:30:11.575Z. Updated 2026-04-03T11:20:13.272Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated03 Apr 2026, 18:20 WIB

Official record

MedPublished 03 Apr 2026, 11:02 WIB

CVE-2026-35545

CVE-2026-35545

An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to information disclosure or access-control bypass. This involves the animate element with attributeName=fill/filter/stroke.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 5301 to 5320 of 5813.First page Next page

Published 2026-04-03T04:02:06.765Z. Updated 2026-04-03T15:36:13.062Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 22:36 WIB

Official record

MedPublished 03 Apr 2026, 10:59 WIB

CVE-2026-35544

CVE-2026-35544

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to a fixed-position mitigation bypass via the use of !important.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T03:59:49.053Z. Updated 2026-04-03T12:50:12.338Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 19:50 WIB

Official record

MedPublished 03 Apr 2026, 10:57 WIB

CVE-2026-35543

CVE-2026-35543

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking feature can be bypassed via SVG content (with animate attributes) in an e-mail message. This may lead to information disclosure or access-control bypass.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T03:57:06.528Z. Updated 2026-04-03T12:50:54.031Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 19:50 WIB

Official record

MedPublished 03 Apr 2026, 10:54 WIB

CVE-2026-35542

CVE-2026-35542

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. The remote image blocking feature can be bypassed via a crafted background attribute of a BODY element in an e-mail message. This may lead to information disclosure or access-control bypass.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T03:54:18.465Z. Updated 2026-04-03T12:51:27.986Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 19:51 WIB

Official record

MedPublished 03 Apr 2026, 10:50 WIB

CVE-2026-35541

CVE-2026-35541

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Incorrect password comparison in the password plugin could lead to type confusion that allows a password change without knowing the old password.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T03:50:47.422Z. Updated 2026-04-03T12:52:08.638Z.

CVSS4.2v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 19:52 WIB

Official record

MedPublished 03 Apr 2026, 10:47 WIB

CVE-2026-35540

CVE-2026-35540

An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14. Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T03:47:51.456Z. Updated 2026-04-03T12:52:38.240Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 19:52 WIB

Official record

MedPublished 03 Apr 2026, 10:39 WIB

CVE-2026-35539

CVE-2026-35539

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exists because of insufficient HTML attachment sanitization in preview mode. A victim must preview a text/html attachment.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T03:39:17.400Z. Updated 2026-04-03T13:10:55.717Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 20:10 WIB

Official record

LowPublished 03 Apr 2026, 10:35 WIB

CVE-2026-35538

CVE-2026-35538

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsanitized IMAP SEARCH command arguments could lead to IMAP injection or CSRF bypass during mail search.

Excerpt language: en.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T03:35:36.925Z. Updated 2026-04-03T13:11:22.365Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 20:11 WIB

Official record

LowPublished 03 Apr 2026, 10:28 WIB

CVE-2026-35537

CVE-2026-35537

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated attackers via crafted session data.

Excerpt language: en.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T03:28:29.321Z. Updated 2026-04-11T14:12:39.387Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated11 Apr 2026, 21:12 WIB

Official record

MedPublished 03 Apr 2026, 09:45 WIB

CVE-2026-5452

UCC CampusConnect App campusconnect.ucc BuildConfig.java hard-coded key

A flaw has been found in UCC CampusConnect App up to 14.3.5 on Android. This vulnerability affects unknown code of the file campusconnect/BuildConfig.java of the component campusconnect.ucc. This manipulation causes use of hard-coded cryptographic key . The attack can only be executed locally. The exploit has been pub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T02:45:09.544Z. Updated 2026-04-03T14:45:11.495Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated03 Apr 2026, 21:45 WIB

Official record

HighPublished 03 Apr 2026, 09:25 WIB

CVE-2026-35536

CVE-2026-35536

In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T02:25:57.427Z. Updated 2026-04-03T13:12:16.105Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 20:12 WIB

Official record

HighPublished 03 Apr 2026, 09:21 WIB

CVE-2026-35535

CVE-2026-35535

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

Excerpt language: en.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T02:21:33.584Z. Updated 2026-09-01T12:04:46.922Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 19:04 WIB

Official record

UnscoredPublished 03 Apr 2026, 08:32 WIB

CVE-2026-28815

CVE-2026-28815

A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure depending on runtime protections. This issue is fixed in swift-crypto version 4.3.1.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T01:32:28.999Z. Updated 2026-04-03T13:39:46.737Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 20:39 WIB

Official record

MedPublished 03 Apr 2026, 08:13 WIB

CVE-2026-35508

CVE-2026-35508

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T01:13:15.180Z. Updated 2026-04-03T13:21:18.222Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 20:21 WIB

Official record

MedPublished 03 Apr 2026, 08:00 WIB

CVE-2026-35507

CVE-2026-35507

Shynet before 0.14.0 allows Host header injection in the password reset flow.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T01:00:35.019Z. Updated 2026-04-03T13:21:46.817Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated03 Apr 2026, 20:21 WIB

Official record

UnscoredPublished 03 Apr 2026, 07:00 WIB

CVE-2025-59709

CVE-2025-59709

An issue was discovered in Biztalk360 through 11.5. because of mishandling of user-provided input in a path to be read by the server, a Super User attacker is able to read files on the system and/or coerce an authentication from the service, aka Directory Traversal.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T00:00:00.000Z. Updated 2026-04-09T20:33:34.007Z.

CVSS—KEVNot listedEPSSPresentUpdated10 Apr 2026, 03:33 WIB

Official record

UnscoredPublished 03 Apr 2026, 07:00 WIB

CVE-2025-59710

CVE-2025-59710

An issue was discovered in Biztalk360 before 11.5. Because of incorrect access control, any user is able to request the loading a DLL file. During the loading, a method is called. An attacker can craft a malicious DLL, upload it to the server, and use it to achieve remote code execution on the server.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T00:00:00.000Z. Updated 2026-04-09T20:30:28.622Z.

CVSS—KEVNot listedEPSSPresentUpdated10 Apr 2026, 03:30 WIB

Official record

UnscoredPublished 03 Apr 2026, 07:00 WIB

CVE-2025-59711

CVE-2025-59711

An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka Directory Traversal.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T00:00:00.000Z. Updated 2026-04-03T15:12:37.606Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 22:12 WIB

Official record

MedPublished 03 Apr 2026, 07:00 WIB

CVE-2026-26477

CVE-2026-26477

An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php file

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-03T00:00:00.000Z. Updated 2026-04-08T18:58:43.482Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 01:58 WIB

Official record