Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 6,236 published records · 10 KEV · 6,236 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

6,236 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4517.2%
High2,14734%
Med2,43639%
Low2253.6%
None90.14%
Legacy00.00%
Unscored96816%

Matching records by UTC month

Mar 266,236

Signal coverage

KEV-listed: 10
With a forecast: 6,236
Unknown date: 0
Unscored severity: 968

Share of cohort: KEV 0.16% · forecast 100% · unscored 16%.

Showing 661–680 of 6,236By severity band: Critical · 9.0–10.0 451, High · 7.0–8.9 2,147, Medium · 4.0–6.9 2,436, Low · 0.1–3.9 225, None · scored 0.0 9, Legacy · v2 only 0, Unscored · no CNA metric 968

MedPublished 27 Mar 2026, 21:04 WIB

CVE-2026-33750

brace-expansion: Zero-step sequence causes process hang and memory exhaustion

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) causes the sequence generation loop to run indefinitely, making the process hang for seconds and allocate heaps of …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T14:04:52.297Z. Updated 2026-03-27T14:48:06.779Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Mar 2026, 21:48 WIB

Official record

MedPublished 27 Mar 2026, 21:02 WIB

CVE-2026-27877

Public dashboards discloses all direct mode datasources

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' secur…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 661 to 680 of 6236.First page Next page

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T14:02:11.889Z. Updated 2026-08-27T17:22:48.099Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 00:22 WIB

Official record

HighPublished 27 Mar 2026, 21:00 WIB

CVE-2026-33748

BuildKit Git URL subdir component can cause access to restricted files

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient validation of Git URL fragment subdir components may allow access to files outside the checked-out Git repository root. Possible access is limited to files on the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T14:00:21.200Z. Updated 2026-03-27T19:58:28.764Z.

CVSS8.2v4.0KEVNot listedEPSSPresentUpdated28 Mar 2026, 02:58 WIB

Official record

LowPublished 27 Mar 2026, 20:58 WIB

CVE-2026-33284

GlobalLeaks has insufficient URL validation in user support API

GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to administrators. Version 5.0.89 patches the issue.

Excerpt language: en.

Severity low: primary CNA CVSS 1.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T13:58:54.085Z. Updated 2026-03-27T19:33:52.223Z.

CVSS1.2v4.0KEVNot listedEPSSPresentUpdated28 Mar 2026, 02:33 WIB

Official record

HighPublished 27 Mar 2026, 20:53 WIB

CVE-2026-33206

calibre has a path traversal vulnerability

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre' handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the file system into the c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T13:53:22.833Z. Updated 2026-03-27T14:48:44.155Z.

CVSS8.2v4.0KEVNot listedEPSSPresentUpdated27 Mar 2026, 21:48 WIB

Official record

MedPublished 27 Mar 2026, 20:52 WIB

CVE-2026-33205

calibre has Server-Side Request Forgery in ebook viewer backend

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a Server-Side Request Forgery vulnerability in the background-image endpoint of calibre e-book reader's web view allows an attacker to perform blind GET requests to arbitrary URLs and exfiltrate …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T13:52:06.860Z. Updated 2026-03-27T19:58:43.747Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated28 Mar 2026, 02:58 WIB

Official record

MedPublished 27 Mar 2026, 20:49 WIB

CVE-2026-33433

Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.42, 3.6.11, and 3.7.0-ea.3, when `headerField` is configured with a non-canonical HTTP header name (e.g., `x-auth-user` instead of `X-Auth-User`), an authenticated attacker can inject their own canonical version of that header to impersonate any…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T13:49:08.455Z. Updated 2026-07-15T01:06:25.616Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:06 WIB

Official record

MedPublished 27 Mar 2026, 20:47 WIB

CVE-2026-32695

Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 3.6.11 and 3.7.0-ea.2, Traefik's Knative provider builds router rules by interpolating user-controlled values into backtick-delimited rule expressions without escaping. In live cluster validation, Knative `rules[].hosts[]` was exploitable for host re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T13:47:03.645Z. Updated 2026-07-15T01:07:47.954Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:07 WIB

Official record

HighPublished 27 Mar 2026, 20:43 WIB

CVE-2025-13478

Cache Misconfiguration Leading to Cross-User Data Exposure

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2(v4.10.1).

Excerpt language: en.

Severity high: primary CNA CVSS 8.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T13:43:34.258Z. Updated 2026-03-27T13:53:41.403Z.

CVSS8.4v4.0KEVNot listedEPSSPresentUpdated27 Mar 2026, 20:53 WIB

Official record

MedPublished 27 Mar 2026, 20:41 WIB

CVE-2026-32859

ByteDance DeerFlow Stored XSS via Inline Artifact Rendering

ByteDance DeerFlow versions prior to commit 5dbb362 contain a stored cross-site scripting vulnerability in the artifacts API that allows attackers to execute arbitrary scripts by uploading malicious HTML or script content as artifacts. Attackers can store malicious content that executes in the browser context when user…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T13:41:22.077Z. Updated 2026-08-14T16:49:45.417Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated14 Aug 2026, 23:49 WIB

Official record

HighPublished 27 Mar 2026, 19:32 WIB

CVE-2026-4982

Unauthorized access to chat contents

A user with permission "update world" in any Venueless world is able to exfiltrate chat messages from direct messages or channels in other worlds on the same server due to a bug in the reporting feature. The exploitability is limited by the fact that the attacker needs to know the internal channel UUID of the chat cha…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T12:32:41.164Z. Updated 2026-03-27T19:39:20.014Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated28 Mar 2026, 02:39 WIB

Official record

HighPublished 27 Mar 2026, 18:55 WIB

CVE-2026-25099

Remote Code Execution via Unrestricted File Upload in Bludit

Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be executed, leading to Remote Code Execution. This issue was fixed in 3.18.4.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T11:55:23.168Z. Updated 2026-03-27T12:42:38.401Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 Mar 2026, 19:42 WIB

Official record

MedPublished 27 Mar 2026, 18:55 WIB

CVE-2026-25100

Stored XSS via SVG File Upload in Bludit

Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its image upload functionality. An authenticated attacker with content upload privileges (such as Author, Editor, or Administrator) can upload an SVG file containing a malicious payload, which is executed when a victim visits the URL of the uploaded resource.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T11:55:17.543Z. Updated 2026-03-27T12:43:37.644Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated27 Mar 2026, 19:43 WIB

Official record

MedPublished 27 Mar 2026, 18:55 WIB

CVE-2026-25101

Session Fixation in Bludit

Bludit allows user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behavior enables an attacker to fix a session ID for a victim and later hijack the authenticated session. This issue was fixed in version 3.17.2.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T11:55:08.924Z. Updated 2026-03-27T12:44:09.658Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated27 Mar 2026, 19:44 WIB

Official record

HighPublished 27 Mar 2026, 18:53 WIB

CVE-2026-4620

CVE-2026-4620

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T11:53:41.863Z. Updated 2026-04-10T04:13:14.137Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated10 Apr 2026, 11:13 WIB

Official record

HighPublished 27 Mar 2026, 18:53 WIB

CVE-2026-4622

CVE-2026-4622

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T11:53:12.245Z. Updated 2026-04-10T04:14:44.673Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated10 Apr 2026, 11:14 WIB

Official record

MedPublished 27 Mar 2026, 18:52 WIB

CVE-2026-4621

CVE-2026-4621

Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T11:52:48.222Z. Updated 2026-04-10T04:13:59.147Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated10 Apr 2026, 11:13 WIB

Official record

MedPublished 27 Mar 2026, 18:46 WIB

CVE-2026-4619

CVE-2026-4619

Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network.

Excerpt language: en.

Severity medium: primary CNA CVSS 6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T11:46:54.450Z. Updated 2026-04-10T04:12:05.787Z.

CVSS6v4.0KEVNot listedEPSSPresentUpdated10 Apr 2026, 11:12 WIB

Official record

MedPublished 27 Mar 2026, 18:46 WIB

CVE-2026-4309

CVE-2026-4309

Missing Authorization vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to get a specific device information and change the settings via network.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T11:46:26.310Z. Updated 2026-04-10T04:10:43.726Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated10 Apr 2026, 11:10 WIB

Official record

MedPublished 27 Mar 2026, 17:53 WIB

CVE-2023-7339

Data collection for dowloading leads into buffer overflow

Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. This issue affects pnGate: through 1.30 epGate: through 1.30 mbGate: through 1.30 smartLink HW-DP: through 1.30 smartLink HW-PN: through 1.01.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-27T10:53:07.778Z. Updated 2026-03-27T12:21:25.031Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 Mar 2026, 19:21 WIB

Official record