Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 741–760 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

HighPublished 28 Aug 2026, 17:12 WIB

CVE-2026-42391

CVE-2026-42391

An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow disproportionately. The login process can be terminated by the out-of-memory handling, which also terminates all other connections handled by the same process. This…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:27.000Z. Updated 2026-08-28T15:54:09.305Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:54 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-42008

CVE-2026-42008

Forwarding information received from a host listed as a trusted proxy is not kept separate from Dovecot's own authentication fields, so a value sent by that host can be injected as an internal authentication field. Any host permitted to act as a trusted proxy can authenticate as any user without knowing that user's pas…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 741 to 760 of 12259.First page Next page

Published 2026-08-28T10:12:26.018Z. Updated 2026-08-28T15:54:17.203Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:54 WIB

Official record

CritPublished 28 Aug 2026, 17:12 WIB

CVE-2026-42007

CVE-2026-42007

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during mail delivery, which c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:25.136Z. Updated 2026-08-28T15:54:24.354Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:54 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-40205

CVE-2026-40205

An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the configuration, the remote token validation paths accept a token that carries only one of them, while the local token validation path correctly requires all of them. The …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:24.186Z. Updated 2026-08-28T14:56:09.120Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 21:56 WIB

Official record

LowPublished 28 Aug 2026, 17:12 WIB

CVE-2026-40204

CVE-2026-40204

None None None No publicly available exploits are known.

Excerpt language: en.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:23.236Z. Updated 2026-08-28T14:56:40.510Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 21:56 WIB

Official record

LowPublished 28 Aug 2026, 17:12 WIB

CVE-2026-40203

CVE-2026-40203

When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail and other mail in the same mailbox. An attacker that can send mail to a user and can also observe the sizes of that user's IMAP traffic can confirm whether the bo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:22.287Z. Updated 2026-08-28T14:57:07.686Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 21:57 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-40019

CVE-2026-40019

An unauthenticated attacker can send a truncated quoted argument to the ManageSieve login process, which makes it spin in an infinite loop consuming CPU. This can cause degradation or denial of service for Sieve script management, and repeated connections can consume all available CPU on the server. Monitor system for …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:21.390Z. Updated 2026-08-28T14:58:20.016Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 21:58 WIB

Official record

HighPublished 28 Aug 2026, 17:12 WIB

CVE-2026-40018

CVE-2026-40018

None None None No publicly available exploits are known.

Excerpt language: en.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:20.457Z. Updated 2026-08-28T15:00:32.995Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:00 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-40017

CVE-2026-40017

An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD command consume CPU disproportionate to the size of the message. This is a separate issue from CVE-2026-40014 and is not addressed by that fix. Whenever a mail cl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:19.524Z. Updated 2026-08-28T15:02:36.570Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:02 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-40015

CVE-2026-40015

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause degradation of service for …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:18.576Z. Updated 2026-08-28T15:03:07.769Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:03 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-40014

CVE-2026-40014

An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU us…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:17.711Z. Updated 2026-08-28T15:54:30.823Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:54 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-40013

CVE-2026-40013

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of service for script manageme…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:16.751Z. Updated 2026-08-28T15:54:38.082Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:54 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-33607

CVE-2026-33607

An attacker that has valid credentials can use IMAP LIST command to consume CPU. This can cause degradation or denial of service for IMAP. Monitor system for abnormal CPU usage and kill the offending process and lock account. Alternatively install fixed version. No publicly available exploits are known.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:15.779Z. Updated 2026-08-28T15:54:47.683Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:54 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-33606

CVE-2026-33606

Mail content stored by a user can be crafted so that it is interpreted as dsync protocol commands when an administrator later runs dsync with the stream protocol, for example during a migration. Injected commands can modify mailbox state on the destination during migration or replication, including internal mailbox att…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:14.932Z. Updated 2026-08-28T15:55:05.515Z.

CVSS4.8v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:55 WIB

Official record

HighPublished 28 Aug 2026, 17:12 WIB

CVE-2026-33605

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode (default for community releases), only the attacker's own connection is terminated. If running in high-performance mode (default for Pro releases), all connect…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:13.963Z. Updated 2026-08-28T15:55:19.368Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:55 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-33604

CVE-2026-33604

An attacker that can get Dovecot to relay a message, for example through Sieve redirect or submission relay, can use a crafted line ending in the message body to bypass the outbound protection that prevents message content from being interpreted as SMTP commands. A downstream mail server that hasn't yet fixed the SMTP …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:12.996Z. Updated 2026-08-28T15:55:26.026Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:55 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-33263

CVE-2026-33263

When mail_max_userip_connections is set (default 10) and reached, submission-login can crash with epoll() panic caused by file descriptor handling issues. If running in high-security mode (default for community releases), only the new submission connection gets terminated. If running in high-performance mode (default f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:12.032Z. Updated 2026-08-28T15:55:33.617Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:55 WIB

Official record

HighPublished 28 Aug 2026, 17:12 WIB

CVE-2026-27852

CVE-2026-27852

An attacker that can send mail to a user can craft a message whose headers contain a very large number of email addresses or MIME parameters, which causes excessive memory usage when the message is later parsed. The message is still delivered, but reading it over IMAP can exhaust the memory limit of the process and ter…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:11.070Z. Updated 2026-08-28T15:55:41.500Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:55 WIB

Official record

MedPublished 28 Aug 2026, 16:42 WIB

CVE-2026-81777

WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T09:42:11.752Z. Updated 2026-08-28T15:28:16.134Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:28 WIB

Official record

MedPublished 28 Aug 2026, 16:05 WIB

CVE-2026-18393

Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor

A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code execution.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T09:05:35.022Z. Updated 2026-08-28T15:55:50.649Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:55 WIB

Official record