Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 721–740 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

HighPublished 28 Aug 2026, 17:49 WIB

CVE-2026-82242

Budibase before 3.41.3 Cross-Application Resource Injection via Missing Authorization

Budibase versions before 3.41.3 contain a missing authorization vulnerability in the POST /api/resources/duplicate endpoint that allows authenticated builders to inject tables, automations, queries, and screens into any other application without holding any role in the destination workspace. Attackers can inject resour…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:30.049Z. Updated 2026-10-08T15:25:25.474Z.

CVSS8.3v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:25 WIB

Official record

HighPublished 28 Aug 2026, 17:49 WIB

CVE-2026-82241

Budibase backend-core SSRF via incomplete default blacklist

Budibase backend-core (@budibase/backend-core, as used by @budibase/server) omits the shared address space range 100.64.0.0/10 from its default SSRF blacklist (DEFAULT_BLACKLIST) used by REST datasource query previews. When the default blacklist is active (i.e., a self-hosted deployment has not defined BLACKLIST_IPS), …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 721 to 740 of 12259.First page Next page

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:29.355Z. Updated 2026-10-08T15:25:24.916Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:25 WIB

Official record

HighPublished 28 Aug 2026, 17:49 WIB

CVE-2026-82240

Budibase before 3.41.3 Privilege Escalation via User Update API

Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the user update API with builder.apps fields to escalate privilege…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:28.683Z. Updated 2026-10-08T15:25:24.323Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:25 WIB

Official record

HighPublished 28 Aug 2026, 17:49 WIB

CVE-2026-82239

Budibase before 3.41.3 Authorization Bypass via datasources/query

Budibase before 3.41.3 fails to enforce per-table role restrictions on the POST /api/datasources/query endpoint, allowing low-privilege BASIC users to read, create, update, or delete rows in any table regardless of configured permissions. Attackers with BASIC role can submit crafted query requests with target table ide…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:28.004Z. Updated 2026-10-08T15:25:23.710Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:25 WIB

Official record

LowPublished 28 Aug 2026, 17:49 WIB

CVE-2026-82238

filebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploads

filebrowser from version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to write past the declared Upload-Length by sending concurrent PATCH requests. Attackers can send multiple simultaneous PATCH requests at the same offset to bypass length validation, resulting in files th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:27.289Z. Updated 2026-09-30T17:20:30.706Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 00:20 WIB

Official record

LowPublished 28 Aug 2026, 17:49 WIB

CVE-2026-82237

filebrowser through 2.63.23 Stale Share Link via File Rename

filebrowser through 2.63.23 does not remove share records when a shared file is renamed (only deletion triggers share cleanup). The share record is keyed by path, so it survives the rename and remains dormant (returning 404 while the path is empty). When any new, unrelated file later appears at the original shared path…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:26.624Z. Updated 2026-08-28T14:00:00.263Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated28 Aug 2026, 21:00 WIB

Official record

LowPublished 28 Aug 2026, 17:49 WIB

CVE-2026-82236

File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving share link to retrieve new unrelated content uploaded to the same path without authentication.

Excerpt language: en.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:25.873Z. Updated 2026-09-30T17:20:30.021Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 00:20 WIB

Official record

HighPublished 28 Aug 2026, 17:49 WIB

CVE-2026-82235

filebrowser through 2.63.23 Denial of Service via named pipes

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server goroutines and exhaust…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:25.222Z. Updated 2026-08-28T15:53:04.375Z.

CVSS8.2v4.0KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:53 WIB

Official record

HighPublished 28 Aug 2026, 17:49 WIB

CVE-2026-82234

SiYuan before v3.8.1 SSRF via DNS-Rebinding TOCTOU

SiYuan versions before v3.8.1 contain a server-side request forgery vulnerability in the http_request and web_fetch agent tools that perform DNS resolution only at guard time without validating the connect-time resolution. Attackers can use DNS rebinding to answer the guard resolution with a public IP and the connect r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:24.564Z. Updated 2026-08-28T16:10:07.633Z.

CVSS8.4v4.0KEVNot listedEPSSPresentUpdated28 Aug 2026, 23:10 WIB

Official record

MedPublished 28 Aug 2026, 17:49 WIB

CVE-2026-82233

SiYuan before v3.8.1 Path Traversal via asset.upload

SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into the asset directory thro…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:23.913Z. Updated 2026-08-31T18:28:15.029Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 01:28 WIB

Official record

MedPublished 28 Aug 2026, 17:49 WIB

CVE-2026-81733

WWBN AVideo through 30.0 CSRF via myLiveControls.save.json.php

WWBN AVideo through 30.0 (and master up to commit 4cb576e) contains a cross-site request forgery vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint only checks that a user is logged in and processes customUrl, customMessage, and autoRedirect parameters from $_REQUEST via a GET request without enfor…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:23.235Z. Updated 2026-08-29T11:48:17.019Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated29 Aug 2026, 18:48 WIB

Official record

MedPublished 28 Aug 2026, 17:49 WIB

CVE-2026-81732

WWBN AVideo through 30.0 Information Disclosure via report4.json.php

WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts without any session or …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:49:22.529Z. Updated 2026-08-29T11:48:16.299Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated29 Aug 2026, 18:48 WIB

Official record

CritPublished 28 Aug 2026, 17:46 WIB

CVE-2026-82222

WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.

Excerpt language: en.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:46:14.315Z. Updated 2026-08-28T14:50:53.520Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 21:50 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-73209

CVE-2026-73209

An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which can cause degradation or denial of service for IMAP. Update to non-vulnerable version. No publicly available exploits are known.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:33.625Z. Updated 2026-08-28T15:53:12.773Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:53 WIB

Official record

HighPublished 28 Aug 2026, 17:12 WIB

CVE-2026-73208

CVE-2026-73208

An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim does not describe what …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:32.679Z. Updated 2026-08-28T15:53:21.257Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:53 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-52687

CVE-2026-52687

An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression state requires a large amount of memory, and open several such connections. The memory limit of the process is reached with only a few connections, terminating the process and all connections it handles…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:31.701Z. Updated 2026-08-28T15:53:30.084Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:53 WIB

Official record

LowPublished 28 Aug 2026, 17:12 WIB

CVE-2026-52681

CVE-2026-52681

Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active script. Compiled script files are also not removed when a script is deleted or renamed. The configured Sieve CPU limit can be bypassed, allowing sustained CPU …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:30.766Z. Updated 2026-08-28T15:53:36.937Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:53 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-42395

CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies are not affected. Restri…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:29.710Z. Updated 2026-08-28T15:53:43.599Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:53 WIB

Official record

LowPublished 28 Aug 2026, 17:12 WIB

CVE-2026-42393

CVE-2026-42393

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of the secret, which reduc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:28.849Z. Updated 2026-08-28T15:53:51.809Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:53 WIB

Official record

MedPublished 28 Aug 2026, 17:12 WIB

CVE-2026-42392

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH functionality. Update to non…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T10:12:27.979Z. Updated 2026-08-28T15:53:58.772Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:53 WIB

Official record