Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 901–920 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

UnscoredPublished 28 Aug 2026, 13:48 WIB

CVE-2026-80595

Input: ims-pcu - add response length checks

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from device buffers without verifying that the device actually sent enough data. This can lead to out-of-bounds reads or processing stale data. Add checks for the expecte…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:48:22.291Z. Updated 2026-08-28T06:48:22.291Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 13:48 WIB

Official record

UnscoredPublished 28 Aug 2026, 13:48 WIB

CVE-2026-80594

Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver parses CDC union descriptors in ims_pcu_get_cdc_union_desc() by iterating through the extra descriptor data. However, it does not verify that the bLength of each …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 901 to 920 of 12259.First page Next page

Published 2026-08-28T06:48:21.426Z. Updated 2026-08-28T06:48:21.426Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 13:48 WIB

Official record

HighPublished 28 Aug 2026, 13:48 WIB

CVE-2026-80593

hwmon: (asus_atk0110) Check package count before accessing element

In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before accessing element atk_ec_present() walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj->package.elements[0]; if (id->typ…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:48:20.816Z. Updated 2026-10-16T19:26:29.448Z.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated17 Oct 2026, 02:26 WIB

Official record

UnscoredPublished 28 Aug 2026, 13:48 WIB

CVE-2026-80592

samples/damon/mtier: fail early if address range parameters are invalid

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on top of `struct damon_region` clearly says that For any use case, @ar should be non-zero positive size. which is now verified in damon_verify_new_region() if …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:48:20.218Z. Updated 2026-08-28T06:48:20.218Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 13:48 WIB

Official record

HighPublished 28 Aug 2026, 13:48 WIB

CVE-2026-80591

f2fs: fix listxattr handling of corrupted xattr entries

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fs_listxattr(). Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a successful partial resu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:48:19.617Z. Updated 2026-08-29T06:21:06.412Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated29 Aug 2026, 13:21 WIB

Official record

HighPublished 28 Aug 2026, 13:39 WIB

CVE-2026-5097

wpForo Forum <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated atta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:39:50.561Z. Updated 2026-08-28T10:38:20.772Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 17:38 WIB

Official record

HighPublished 28 Aug 2026, 13:39 WIB

CVE-2026-6286

Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customer name fields in versions up to and including 2.2. This is due to an authentication bypass where the AddBookingCommand explicitly skips nonce verification (Command.php line 186), allowi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:39:50.172Z. Updated 2026-08-28T18:35:55.988Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated29 Aug 2026, 01:35 WIB

Official record

CritPublished 28 Aug 2026, 13:39 WIB

CVE-2026-76581

WPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC message construction between the unauthenticated `wdpsso_step1` and `wdpsso_step2` AJAX actions, where step 1 signs and discloses an unseparated …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:39:49.567Z. Updated 2026-08-28T15:24:54.022Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated28 Aug 2026, 22:24 WIB

Official record

HighPublished 28 Aug 2026, 13:35 WIB

CVE-2026-80590

inet: frags: strip GSO state from fragments before reassembly

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtio_net_hdr (tun/tap, or AF_PACKET with PACKET_VNET_HDR) can mark an IPv4 or IPv6 fragment as GSO; nothing relates gso_type to frag_off. inet_frag_reasm_prepare()/inet_frag_reasm_fini…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:35:12.516Z. Updated 2026-10-19T08:43:12.426Z.

CVSS8.6v3.1KEVNot listedEPSSPresentUpdated19 Oct 2026, 15:43 WIB

Official record

CritPublished 28 Aug 2026, 13:11 WIB

CVE-2026-78032

CVE-2026-78032

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:11:11.567Z. Updated 2026-08-28T16:10:55.790Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated28 Aug 2026, 23:10 WIB

Official record

MedPublished 28 Aug 2026, 13:11 WIB

CVE-2026-78238

CVE-2026-78238

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:11:06.057Z. Updated 2026-08-28T16:11:28.141Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated28 Aug 2026, 23:11 WIB

Official record

MedPublished 28 Aug 2026, 13:10 WIB

CVE-2026-77838

CVE-2026-77838

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:10:58.005Z. Updated 2026-08-28T16:12:47.204Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated28 Aug 2026, 23:12 WIB

Official record

MedPublished 28 Aug 2026, 13:10 WIB

CVE-2026-73827

CVE-2026-73827

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:10:48.880Z. Updated 2026-08-28T16:14:39.069Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated28 Aug 2026, 23:14 WIB

Official record

UnscoredPublished 28 Aug 2026, 13:00 WIB

CVE-2026-79996

User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator access to change arbit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:00:17.519Z. Updated 2026-08-28T13:03:20.076Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 20:03 WIB

Official record

UnscoredPublished 28 Aug 2026, 13:00 WIB

CVE-2026-79995

User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email change, including an a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:00:17.343Z. Updated 2026-08-28T13:03:20.229Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 20:03 WIB

Official record

UnscoredPublished 28 Aug 2026, 13:00 WIB

CVE-2026-79706

Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:00:17.170Z. Updated 2026-08-28T13:03:20.389Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 20:03 WIB

Official record

UnscoredPublished 28 Aug 2026, 13:00 WIB

CVE-2026-79615

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR

The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing users with a role as low as Contributor to read the questions, hints and correct answer keys of quizzes belonging to other users.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:00:17.000Z. Updated 2026-08-28T13:03:20.541Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 20:03 WIB

Official record

UnscoredPublished 28 Aug 2026, 13:00 WIB

CVE-2026-77701

WCFM Marketplace < 3.8.2 - Unauthenticated Refund Request Creation on Guest Orders

The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund requests against any guest checkout order on the site.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:00:16.799Z. Updated 2026-08-28T13:03:20.688Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 20:03 WIB

Official record

UnscoredPublished 28 Aug 2026, 13:00 WIB

CVE-2026-19423

Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms

The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection when it cannot resolve the set of roles a profile form permits, and screens the value against the site's registered role names rather than against the form's own allow-list, allowing unauthenticated users who register throu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:00:16.618Z. Updated 2026-08-28T13:03:20.842Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 20:03 WIB

Official record

UnscoredPublished 28 Aug 2026, 13:00 WIB

CVE-2026-19084

Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-28T06:00:16.188Z. Updated 2026-08-28T13:03:21.003Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 20:03 WIB

Official record