Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 14,934 published records · 32 KEV · 14,934 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

14,934 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2258.2%
High5,37436%
Med4,26529%
Low4232.8%
None20.01%
Legacy00.00%
Unscored3,64524%

Matching records by UTC month

Sep 2614,934

Signal coverage

KEV-listed: 32
With a forecast: 14,934
Unknown date: 0
Unscored severity: 3,645

Share of cohort: KEV 0.21% · forecast 100% · unscored 24%.

Showing 701–720 of 14,934By severity band: Critical · 9.0–10.0 1,225, High · 7.0–8.9 5,374, Medium · 4.0–6.9 4,265, Low · 0.1–3.9 423, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 3,645

HighPublished 30 Sep 2026, 03:01 WIB

CVE-2026-102878

mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script execution, page content r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T20:01:07.610Z. Updated 2026-09-29T20:19:14.663Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 03:19 WIB

Official record

LowPublished 30 Sep 2026, 03:01 WIB

CVE-2026-102877

Fider before 0.38.0 SSRF via DNS rebinding in webhook validation

Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. Administrators controlling DNS can perform DNS rebinding attacks to make the Fider server send requests to internal services or cloud metada…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 701 to 720 of 14934.First page Next page

Published 2026-09-29T20:01:06.796Z. Updated 2026-09-30T19:26:51.504Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 02:26 WIB

Official record

HighPublished 30 Sep 2026, 03:01 WIB

CVE-2026-102876

SurrealDB before 3.3.0 Cross-Tenant Access via Headers

SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check_auth() verifies credentials against Surreal-Auth-NS and Surreal-Auth-DB headers but constructs sessions using Surreal-NS and Surreal-DB headers without validating access permissions. Attackers can authenticate as a user fro…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T20:01:06.088Z. Updated 2026-10-02T12:25:20.288Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated02 Oct 2026, 19:25 WIB

Official record

HighPublished 30 Sep 2026, 03:01 WIB

CVE-2026-102875

VLC media player before 3.0.24 Path Traversal via skins2

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code execution through Lua script…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T20:01:05.435Z. Updated 2026-09-30T13:50:29.006Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 20:50 WIB

Official record

CritPublished 30 Sep 2026, 02:55 WIB

CVE-2026-53988

Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints

Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by exploiting a null webhook secret guard condition. Attackers can enumerate sequential stack IDs and send unsigned webhook requests t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:55:59.316Z. Updated 2026-10-02T12:24:18.939Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated02 Oct 2026, 19:24 WIB

Official record

HighPublished 30 Sep 2026, 02:52 WIB

CVE-2026-100299

Use of Weak Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption.

Excerpt language: en.

Severity high: primary CNA CVSS 7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:52:15.385Z. Updated 2026-09-29T21:01:59.882Z.

CVSS7v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 04:01 WIB

Official record

HighPublished 30 Sep 2026, 02:50 WIB

CVE-2026-100298

Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and account details under conditions that are not intended for normal operation.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:50:40.036Z. Updated 2026-09-29T21:01:59.628Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 04:01 WIB

Official record

MedPublished 30 Sep 2026, 02:48 WIB

CVE-2026-100297

Server-Side request forgery (SSRF) in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:48:42.485Z. Updated 2026-09-29T21:01:59.499Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 04:01 WIB

Official record

HighPublished 30 Sep 2026, 02:46 WIB

CVE-2026-100296

Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H5

In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler, silently downgrades the administrator password to the default value and corrupts the in-memory authentication state until the device reloads. The handler does not verify the se…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:46:35.568Z. Updated 2026-09-29T21:01:59.369Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated30 Sep 2026, 04:01 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102305

CVE-2026-102305

UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:07.541Z. Updated 2026-09-29T20:24:40.491Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 03:24 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102314

CVE-2026-102314

UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:07.377Z. Updated 2026-09-29T20:51:55.528Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 03:51 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102330

CVE-2026-102330

Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:07.204Z. Updated 2026-09-30T16:56:31.143Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 23:56 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102327

CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:07.020Z. Updated 2026-09-30T03:57:07.025Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 10:57 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102310

CVE-2026-102310

Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:06.841Z. Updated 2026-09-30T16:55:26.628Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 23:55 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102320

CVE-2026-102320

Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:06.640Z. Updated 2026-09-30T16:54:33.658Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 23:54 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102321

CVE-2026-102321

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:06.454Z. Updated 2026-09-30T03:57:08.474Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 10:57 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102302

CVE-2026-102302

Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:06.272Z. Updated 2026-09-30T03:57:09.185Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 10:57 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102315

CVE-2026-102315

Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:06.079Z. Updated 2026-09-29T21:06:31.197Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 04:06 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102329

CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: High)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:05.926Z. Updated 2026-09-30T16:53:27.926Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 23:53 WIB

Official record

UnscoredPublished 30 Sep 2026, 02:45 WIB

CVE-2026-102318

CVE-2026-102318

Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-29T19:45:05.736Z. Updated 2026-09-29T21:08:45.436Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Sep 2026, 04:08 WIB

Official record