Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 335 published records · 10 KEV · 335 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

335 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit335100%
High00.00%
Med00.00%
Low00.00%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

Jan 26335

Signal coverage

KEV-listed: 10
With a forecast: 335
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 3.0% · forecast 100% · unscored 0.00%.

Showing 1–20 of 335By severity band: Critical · 9.0–10.0 335, High · 7.0–8.9 0, Medium · 4.0–6.9 0, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

CritPublished 01 Feb 2026, 06:46 WIB

CVE-2026-25069

SunFounder Pironman Dashboard <= 1.3.13 Path Traversal Arbitrary File Read/Deletion

SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can supply traversal sequences via the filename parameter to read and delete arbitrary files. Successful exploitation can disclose sensitive info…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T23:46:59.669Z. Updated 2026-07-14T15:53:39.770Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2026, 22:53 WIB

Official record

CritPublished 31 Jan 2026, 18:38 WIB

CVE-2025-71183

btrfs: always detect conflicting inodes when logging inode refs

In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging (either with the rename exchange operation or regular renames in multiple non-atomic steps) two inodes and at least one of them is a directory, we can end up with…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1 to 20 of 335.Next page

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:38:56.067Z. Updated 2026-10-19T18:15:16.685Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated20 Oct 2026, 01:15 WIB

Official record

CritPublished 31 Jan 2026, 05:07 WIB

CVE-2020-37052

AirControl 1.4.2 - PreAuth Remote Code Execution

AirControl 1.4.2 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands through malicious Java expression injection. Attackers can exploit the /.seam endpoint by crafting a specially constructed URL with embedded Java expressions to r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T22:07:18.685Z. Updated 2026-02-02T20:05:43.002Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated03 Feb 2026, 03:05 WIB

Official record

CritPublished 31 Jan 2026, 05:07 WIB

CVE-2020-37027

Sickbeard 0.1 - Remote Command Injection

Sickbeard alpha contains a remote command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands through the extra scripts configuration. Attackers can set malicious commands in the extra scripts field and trigger processing to execute remote code on the vulnerable Sickbeard install…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T22:07:10.289Z. Updated 2026-02-03T20:37:57.139Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated04 Feb 2026, 03:37 WIB

Official record

CritPublished 31 Jan 2026, 03:52 WIB

CVE-2026-1723

TOTOLINK X6000R Unauthenticated Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498_B20250826.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T20:52:09.764Z. Updated 2026-02-26T15:04:41.771Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated26 Feb 2026, 22:04 WIB

Official record

CritPublished 31 Jan 2026, 03:19 WIB

CVE-2026-25141

Orval has a code injection via unsanitized x-enum-descriptions uing JS comments

Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions starting with 7.19.0 and prior to 7.21.0 and 8.2.0 have an incomplete fix for CVE-2026-23947. While the jsStringEscape function properly handles single quotes ('), double quotes (") and so on, it is still p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T20:19:04.333Z. Updated 2026-02-02T18:00:17.681Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated03 Feb 2026, 01:00 WIB

Official record

CritPublished 31 Jan 2026, 03:15 WIB

CVE-2026-25130

Cybersecurity AI vulnerable to command Injection through argument injection in find_file Agent tool

Cybersecurity AI (CAI) is a framework for AI Security. In versions up to and including 0.5.10, the CAI (Cybersecurity AI) framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via `subprocess.Popen()` with `shell=True`, allowing …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T20:15:51.772Z. Updated 2026-02-02T18:01:06.518Z.

CVSS9.7v3.1KEVNot listedEPSSPresentUpdated03 Feb 2026, 01:01 WIB

Official record

CritPublished 31 Jan 2026, 03:11 WIB

CVE-2025-24293

CVE-2025-24293

# Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The default allowed list contains three methods allow for the circumvention of the safe defaults which enables potential com…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T20:11:15.219Z. Updated 2026-07-15T01:26:46.864Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:26 WIB

Official record

CritPublished 30 Jan 2026, 22:02 WIB

CVE-2025-7964

Zigbee Router Denial of Service

After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T15:02:53.825Z. Updated 2026-01-30T15:36:46.637Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated30 Jan 2026, 22:36 WIB

Official record

CritPublished 30 Jan 2026, 18:05 WIB

CVE-2025-26385

Metasys product command injection vulnerability could allow remote SQL execution

Johnson Controls Metasys component listed below have Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability . Successful exploitation of this vulnerability could allow remote SQL execution This issue affects * Metasys: Application and Data Server (ADS) installed with SQL…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T11:05:16.688Z. Updated 2026-01-30T12:38:11.405Z.

CVSS9.5v4.0KEVNot listedEPSSPresentUpdated30 Jan 2026, 19:38 WIB

Official record

CritPublished 30 Jan 2026, 16:57 WIB

CVE-2026-1699

CVE-2026-1699

In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI environment with access to repository secrets an…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T09:57:14.877Z. Updated 2026-02-02T19:26:31.652Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated03 Feb 2026, 02:26 WIB

Official record

CritPublished 30 Jan 2026, 13:04 WIB

CVE-2026-0963

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller

An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T06:04:05.503Z. Updated 2026-02-02T16:33:26.381Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated02 Feb 2026, 23:33 WIB

Official record

CritPublished 30 Jan 2026, 10:50 WIB

CVE-2026-24729

Interinfo DreamMaker - Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to execute arbitrary system commands via a malicious class file.

Excerpt language: en.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T03:50:31.763Z. Updated 2026-01-30T18:06:51.293Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated31 Jan 2026, 01:06 WIB

Official record

CritPublished 30 Jan 2026, 10:48 WIB

CVE-2026-24728

Interinfo DreamMaker - Missing Authentication for Critical Function

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T03:48:28.100Z. Updated 2026-01-30T18:19:12.243Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated31 Jan 2026, 01:19 WIB

Official record

CritPublished 30 Jan 2026, 04:39 WIB

CVE-2026-25047

deepHas vulnerable to Prototype Pollution via constructor.prototype

deepHas provides a test for the existence of a nested object key and optionally returns that key. A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavior. This issue was fixed in version 1.0.8.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-29T21:39:48.498Z. Updated 2026-02-02T16:35:22.701Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated02 Feb 2026, 23:35 WIB

Official record

CritKEVPublished 30 Jan 2026, 04:33 WIB

CVE-2026-1340

CVE-2026-1340

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.

Published 2026-01-29T21:33:11.768Z. Updated 2026-04-09T03:55:54.081Z.

CVSS9.8v3.1KEVListedEPSSPresentUpdated09 Apr 2026, 10:55 WIB

Official record

CritKEVPublished 30 Jan 2026, 04:31 WIB

CVE-2026-1281

CVE-2026-1281

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.

Published 2026-01-29T21:31:17.041Z. Updated 2026-10-07T18:00:12.330Z.

CVSS9.8v3.1KEVListedEPSSPresentUpdated08 Oct 2026, 01:00 WIB

Official record

CritPublished 30 Jan 2026, 02:54 WIB

CVE-2026-22806

vCluster Platform's Access Keys Allows Access Beyond Scope

vCluster Platform provides a Kubernetes platform for managing virtual clusters, multi-tenancy, and cluster sharing. Prior to versions 4.6.0, 4.5.4, 4.4.2, and 4.3.10, when an access key is created with a limited scope, the scope can be bypassed to access resources outside of it. However, the user still cannot access re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-29T19:54:37.810Z. Updated 2026-01-29T21:19:58.653Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated30 Jan 2026, 04:19 WIB

Official record

CritPublished 30 Jan 2026, 02:02 WIB

CVE-2026-1453

Missing Authentication for Critical Function in KiloView Encoder Series

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-29T19:02:26.431Z. Updated 2026-01-29T20:28:55.866Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 Jan 2026, 03:28 WIB

Official record

CritPublished 30 Jan 2026, 02:02 WIB

CVE-2026-1610

Tenda AX12 Pro V2 Telnet Service hard-coded credentials

A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-29T19:02:08.122Z. Updated 2026-02-23T09:06:50.985Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated23 Feb 2026, 16:06 WIB

Official record