Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 210 published records · 0 KEV · 210 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

210 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit00.00%
High00.00%
Med00.00%
Low210100%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

Feb 26210

Signal coverage

KEV-listed: 0
With a forecast: 210
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 0.00% · forecast 100% · unscored 0.00%.

Showing 1–20 of 210By severity band: Critical · 9.0–10.0 0, High · 7.0–8.9 0, Medium · 4.0–6.9 0, Low · 0.1–3.9 210, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

LowPublished 28 Feb 2026, 05:08 WIB

CVE-2026-28422

Vim has stack-buffer-overflow in build_stl_str_hl()

Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.

Excerpt language: en.

Severity low: primary CNA CVSS 2.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-27T22:08:11.384Z. Updated 2026-03-02T21:45:53.806Z.

CVSS2.2v3.1KEVNot listedEPSSPresentUpdated03 Mar 2026, 04:45 WIB

Official record

LowPublished 28 Feb 2026, 04:04 WIB

CVE-2026-28355

"PWA" Canarytoken Vulnerable to Stored Self Cross-Site Scripting

Canarytokens help track activity and actions on a network. Versions prior to `sha-7ff0e12` have a Self Cross-Site Scripting vulnerability in the "PWA" Canarytoken, whereby the Canarytoken's creator can attack themselves or someone they share the link with. The creator of a PWA Canarytoken can insert Javascript into the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1 to 20 of 210.Next page

Published 2026-02-27T21:04:13.445Z. Updated 2026-03-03T20:29:43.254Z.

CVSS1.3v4.0KEVNot listedEPSSPresentUpdated04 Mar 2026, 03:29 WIB

Official record

LowPublished 28 Feb 2026, 02:15 WIB

CVE-2026-26997

ClipBucket v5 has Stored XSS via Collection name

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, a normal authenticated user can store the XSS payload. The payload is triggered by administrator. Version 5.5.3 #59 fixes the issue.

Excerpt language: en.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-27T19:15:11.123Z. Updated 2026-02-27T20:24:08.947Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated28 Feb 2026, 03:24 WIB

Official record

LowPublished 28 Feb 2026, 02:11 WIB

CVE-2026-22717

VMware Workstation out-of-bound read vulnerability

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed.

Excerpt language: en.

Severity low: primary CNA CVSS 2.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-27T19:11:54.924Z. Updated 2026-02-27T20:14:10.400Z.

CVSS2.7v3.1KEVNot listedEPSSPresentUpdated28 Feb 2026, 03:14 WIB

Official record

LowPublished 28 Feb 2026, 00:57 WIB

CVE-2026-21619

Unsafe Deserialization of Erlang Terms in hex_core

Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), hexpm hex (mix_hex_api modules), erlang rebar3 (r3_hex_api modules) allows Object Injection, Excessive Allocation. This vulnerability is associated with program files src/hex_api.erl, src/mix_hex_api.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-27T17:57:11.513Z. Updated 2026-05-27T15:40:33.166Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated27 May 2026, 22:40 WIB

Official record

LowPublished 27 Feb 2026, 15:10 WIB

CVE-2025-12150

Org.keycloak/keycloak-services: webauthn attestation statement verification bypass

A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the configured attestation policy and register untrusted or forged authenticators via submission of an attestation object with fmt: "none", even when the realm is configured to require direct attestation. Thi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-27T08:10:15.448Z. Updated 2026-08-10T01:55:06.941Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated10 Aug 2026, 08:55 WIB

Official record

LowPublished 27 Feb 2026, 08:01 WIB

CVE-2026-22877

Copeland XWEB and XWEB Pro Path Traversal

An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to read arbitrary files on the system, and potentially causing a denial-of-service attack.

Excerpt language: en.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-27T01:01:25.949Z. Updated 2026-03-02T14:26:42.805Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated02 Mar 2026, 21:26 WIB

Official record

LowPublished 27 Feb 2026, 05:04 WIB

CVE-2026-27838

wger: IDOR via user-unscoped cache keys on routine API actions exposes workout data

wger is a free, open-source workout and fitness manager. Five routine detail action endpoints check a cache before calling `self.get_object()`. In versions up to and including 2.4, ache keys are scoped only by `pk` — no user ID is included. When a victim has previously accessed their routine via the API, an attacker ca…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T22:04:57.968Z. Updated 2026-03-03T01:37:38.975Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated03 Mar 2026, 08:37 WIB

Official record

LowPublished 27 Feb 2026, 04:27 WIB

CVE-2026-28227

Discourse Vulnerable to Unauthorized Topic Creation in Staff-Only Categories via Topic Timer publish_to_category

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users can publish topics into staff-only categories via the `publish_to_category` topic timer, bypassing authorization checks. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are av…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T21:27:38.926Z. Updated 2026-03-03T14:44:26.448Z.

CVSS1.2v4.0KEVNot listedEPSSPresentUpdated03 Mar 2026, 21:44 WIB

Official record

LowPublished 27 Feb 2026, 04:25 WIB

CVE-2026-28219

Privilege Escalation via Mass Assignment Allows Regular Users to Set Topics as Global Banners

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, an improper authorization check in the topic management logic allows authenticated users to modify privileged attributes of their topics. By manipulating specific parameters in a PUT or POST request, a regular user can…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T21:25:36.635Z. Updated 2026-03-03T15:08:17.328Z.

CVSS1.3v4.0KEVNot listedEPSSPresentUpdated03 Mar 2026, 22:08 WIB

Official record

LowPublished 27 Feb 2026, 04:20 WIB

CVE-2026-27154

Discourse has XSS when editing a malicious post

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, a user full name can be evaluated as raw HTML when the following settings are set: `display_name_on_posts` => true; and `prioritize_username_in_ux` => false. Editing a post of a malicious user would trigger an XSS. Ver…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T21:20:25.181Z. Updated 2026-03-02T20:57:00.349Z.

CVSS1.3v4.0KEVNot listedEPSSPresentUpdated03 Mar 2026, 03:57 WIB

Official record

LowPublished 27 Feb 2026, 04:16 WIB

CVE-2026-27153

Discourse doesn't prevent moderators from exporting user Chat DMs

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, moderators could export user Chat DMs via the CSV export endpoint by exploiting an overly permissive allowlist in `can_export_entity?`. The method allowed moderators to export any entity not explicitly blocked instead …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T21:16:41.077Z. Updated 2026-03-02T20:56:14.103Z.

CVSS1.3v4.0KEVNot listedEPSSPresentUpdated03 Mar 2026, 03:56 WIB

Official record

LowPublished 27 Feb 2026, 03:00 WIB

CVE-2026-27152

DIscourse has DM communication-preference bypass when adding members

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, DM communication-preference bypass when adding members via `Chat::AddUsersToChannel` — a user could add targets who have blocked/ignored/muted them to an existing DM channel, bypassing per-recipient PM restrictions tha…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T20:00:33.138Z. Updated 2026-03-03T01:41:16.401Z.

CVSS1.3v4.0KEVNot listedEPSSPresentUpdated03 Mar 2026, 08:41 WIB

Official record

LowPublished 27 Feb 2026, 02:57 WIB

CVE-2026-27151

Discourse doesn't validate destination topic when moving posts

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, the `move_posts` action only checked `can_move_posts?` on the source topic but never validated write permissions on the destination topic. This allowed TL4 users and category group moderators to move posts into topics …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T19:57:06.920Z. Updated 2026-03-03T01:42:49.872Z.

CVSS1.3v4.0KEVNot listedEPSSPresentUpdated03 Mar 2026, 08:42 WIB

Official record

LowPublished 27 Feb 2026, 02:55 WIB

CVE-2026-27150

Discourse doesn't ensure guardian check when creating QueryGroupBookmark

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing `validate_before_create` authorization in Data Explorer's `QueryGroupBookmarkable` allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata disclosure via book…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T19:55:35.263Z. Updated 2026-03-03T01:43:29.850Z.

CVSS1.3v4.0KEVNot listedEPSSPresentUpdated03 Mar 2026, 08:43 WIB

Official record

LowPublished 27 Feb 2026, 00:32 WIB

CVE-2026-23749

Golioth Firmware SDK < 0.22.0 Blockwise Transfer Path Out-of-Bounds Read

Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to improper null termination of a blockwise transfer path. blockwise_transfer_init() accepts a path whose length equals CONFIG_GOLIOTH_COAP_MAX_PATH_LEN and copies it using strncpy() without guaranteeing a t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T17:32:30.795Z. Updated 2026-07-14T15:53:37.722Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated14 Jul 2026, 22:53 WIB

Official record

LowPublished 26 Feb 2026, 22:21 WIB

CVE-2026-26228

VLC for Android < 3.7.0 Remote Access Path Traversal

VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalization or directory containm…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T15:21:00.590Z. Updated 2026-10-13T11:20:55.663Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated13 Oct 2026, 18:20 WIB

Official record

LowPublished 26 Feb 2026, 14:57 WIB

CVE-2026-1696

Missing security HTTP headers

Some HTTP security headers are not properly set by the web server when sending responses to the client application.

Excerpt language: en.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T07:57:29.109Z. Updated 2026-03-26T08:23:46.958Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated26 Mar 2026, 15:23 WIB

Official record

LowPublished 26 Feb 2026, 14:56 WIB

CVE-2026-1694

Server configuration details in HTTP headers

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information about the server confi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T07:56:57.048Z. Updated 2026-03-26T08:22:30.221Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated26 Mar 2026, 15:22 WIB

Official record

LowPublished 26 Feb 2026, 09:54 WIB

CVE-2026-27465

Fleet: Sensitive Google Calendar credentials disclosed to low-privileged users

Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fleet’s configuration API could expose Google Calendar service account credentials to authenticated users with low-privilege roles. This may allow unauthorized access to Google Calendar resources associated with the service…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-02-26T02:54:04.886Z. Updated 2026-02-26T14:26:24.835Z.

CVSS1.3v4.0KEVNot listedEPSSPresentUpdated26 Feb 2026, 21:26 WIB

Official record