Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 881–900 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

MedPublished 28 Oct 2026, 16:21 WIB

CVE-2026-86392

CVE-2026-86392

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T09:21:54.318Z. Updated 2026-10-29T01:52:05.425Z.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 08:52 WIB

Official record

HighPublished 28 Oct 2026, 16:18 WIB

CVE-2026-86393

CVE-2026-86393

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 881 to 900 of 16156.First page Next page

Published 2026-10-28T09:18:00.266Z. Updated 2026-10-28T16:08:48.021Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:08 WIB

Official record

CritPublished 28 Oct 2026, 16:15 WIB

CVE-2026-14571

SQL injection (SQLi) in the user authentication module of Futurum Software

A Blind SQL Injection vulnerability in Futurum Software’s management software, caused by a lack of adequate validation and sanitisation of user-provided inputs in queries to the private area’s database, as well as by an incorrect WAF configuration. This weakness allows the protection mechanisms to be bypassed solely by…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T09:15:03.663Z. Updated 2026-10-28T09:15:03.663Z.

CVSS9.1v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 16:15 WIB

Official record

HighPublished 28 Oct 2026, 16:14 WIB

CVE-2026-86394

CVE-2026-86394

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Comman…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T09:14:24.715Z. Updated 2026-10-28T09:14:24.715Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 16:14 WIB

Official record

HighPublished 28 Oct 2026, 16:10 WIB

CVE-2026-86395

CVE-2026-86395

Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Com…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T09:10:39.838Z. Updated 2026-10-28T16:09:07.366Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:09 WIB

Official record

HighPublished 28 Oct 2026, 16:05 WIB

CVE-2026-86396

CVE-2026-86396

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Comman…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T09:05:55.474Z. Updated 2026-10-28T09:05:55.474Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 16:05 WIB

Official record

CritPublished 28 Oct 2026, 16:02 WIB

CVE-2026-86397

CVE-2026-86397

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An unauthenticated attacker with remot…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T09:02:11.392Z. Updated 2026-10-28T09:02:11.392Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 16:02 WIB

Official record

HighPublished 28 Oct 2026, 15:58 WIB

CVE-2026-86398

CVE-2026-86398

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:58:15.053Z. Updated 2026-10-28T08:58:15.053Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 15:58 WIB

Official record

HighPublished 28 Oct 2026, 15:54 WIB

CVE-2026-86399

CVE-2026-86399

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Comman…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:54:03.557Z. Updated 2026-10-28T08:54:03.557Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 15:54 WIB

Official record

CritPublished 28 Oct 2026, 15:50 WIB

CVE-2026-86400

CVE-2026-86400

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An unauthenticated attacker with remot…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:50:11.332Z. Updated 2026-10-28T08:50:11.332Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 15:50 WIB

Official record

LowPublished 28 Oct 2026, 15:46 WIB

CVE-2026-86401

CVE-2026-86401

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:46:36.081Z. Updated 2026-10-28T08:46:36.081Z.

CVSS2.7v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 15:46 WIB

Official record

CritPublished 28 Oct 2026, 15:42 WIB

CVE-2026-90717

CVE-2026-90717

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low priv…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:42:53.657Z. Updated 2026-10-28T16:09:15.934Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:09 WIB

Official record

MedPublished 28 Oct 2026, 15:41 WIB

CVE-2026-16020

Stored XSS Fazile BACAK's DefterAsist Financial Advisor Platform

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fazile BACAK DefterAsist Financial Advisor Platform allows Stored XSS. This issue affects DefterAsist Financial Advisor Platform: through 2026-10-27.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:41:50.528Z. Updated 2026-10-28T08:41:50.528Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 15:41 WIB

Official record

LowPublished 28 Oct 2026, 15:36 WIB

CVE-2026-90719

CVE-2026-90719

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:36:16.969Z. Updated 2026-10-28T08:36:16.969Z.

CVSS2.7v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 15:36 WIB

Official record

MedPublished 28 Oct 2026, 15:32 WIB

CVE-2026-90720

CVE-2026-90720

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value vulnerability. A high privileged…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:32:31.338Z. Updated 2026-10-28T16:09:22.289Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:09 WIB

Official record

LowPublished 28 Oct 2026, 15:28 WIB

CVE-2026-90721

CVE-2026-90721

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access cou…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:28:43.038Z. Updated 2026-10-29T01:52:05.577Z.

CVSS3.4v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 08:52 WIB

Official record

LowPublished 28 Oct 2026, 15:24 WIB

CVE-2026-90723

CVE-2026-90723

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:24:47.194Z. Updated 2026-10-28T08:24:47.194Z.

CVSS2.7v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 15:24 WIB

Official record

LowPublished 28 Oct 2026, 15:20 WIB

CVE-2026-90724

CVE-2026-90724

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T08:20:39.490Z. Updated 2026-10-28T08:20:39.490Z.

CVSS2.7v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 15:20 WIB

Official record

MedPublished 28 Oct 2026, 14:49 WIB

CVE-2026-118435

CVE-2026-118435

Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T07:49:14.205Z. Updated 2026-10-28T07:54:29.600Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 14:54 WIB

Official record

MedPublished 28 Oct 2026, 14:48 WIB

CVE-2026-85655

Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow

The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and above, to mod…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-28T07:48:29.420Z. Updated 2026-10-29T01:41:49.939Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated29 Oct 2026, 08:41 WIB

Official record