Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 225 published records · 0 KEV · 225 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

225 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit00.00%
High00.00%
Med00.00%
Low225100%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

Mar 26225

Signal coverage

KEV-listed: 0
With a forecast: 225
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 0.00% · forecast 100% · unscored 0.00%.

Showing 1–20 of 225By severity band: Critical · 9.0–10.0 0, High · 7.0–8.9 0, Medium · 4.0–6.9 0, Low · 0.1–3.9 225, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

LowPublished 01 Apr 2026, 02:27 WIB

CVE-2026-34203

Nautobot: Management of users via REST API does not apply configured password validators

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to versions 2.4.30 and 3.0.10, user creation and editing via the REST API fails to apply the password validation rules defined by Django's AUTH_PASSWORD_VALIDATORS setting (which defaults to an empty list, i.e., no specific rules, but can be c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T19:27:29.903Z. Updated 2026-03-31T20:30:00.988Z.

CVSS2.7v3.1KEVNot listedEPSSPresentUpdated01 Apr 2026, 03:30 WIB

Official record

LowPublished 01 Apr 2026, 00:40 WIB

CVE-2026-32607

Discourse: Stored XSS via unescaped assignee name

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, when the hidden prioritize_full_name_in_ux site setting is enabled (defaults to false, requires console access to change), user and group display…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1 to 20 of 225.Next page

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T17:40:05.155Z. Updated 2026-04-01T13:48:54.473Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated01 Apr 2026, 20:48 WIB

Official record

LowPublished 01 Apr 2026, 00:38 WIB

CVE-2026-33073

discourse-subscriptions plugin leaking stripe API key in multisite environment

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, the discourse-subscriptions plugin leaks stripe API keys across sites in a multisite cluster resulting in the potential for stripe related inform…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T17:38:59.916Z. Updated 2026-04-03T16:16:18.969Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated03 Apr 2026, 23:16 WIB

Official record

LowPublished 31 Mar 2026, 21:25 WIB

CVE-2026-34224

Parse Server: MFA single-use token bypass via concurrent authData login requests

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.64 and 9.7.0-alpha.8, an attacker who possesses a valid authentication provider token and a single MFA recovery code or SMS one-time password can create multiple authenticated sessions by sendin…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T14:25:22.782Z. Updated 2026-04-02T15:16:27.489Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated02 Apr 2026, 22:16 WIB

Official record

LowPublished 31 Mar 2026, 20:47 WIB

CVE-2026-33762

go-git: Missing validation decoding Index v4 files leads to panic

go-git is an extensible git implementation library written in pure Go. Prior to version 5.17.1, go-git’s index decoder for format version 4 fails to validate the path name prefix length before applying it to the previously decoded path name. A maliciously crafted index file can trigger an out-of-bounds slice operation,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T13:47:42.378Z. Updated 2026-03-31T18:53:08.221Z.

CVSS2.8v3.1KEVNot listedEPSSPresentUpdated01 Apr 2026, 01:53 WIB

Official record

LowPublished 31 Mar 2026, 18:53 WIB

CVE-2026-0397

Information disclosure via CORS misconfiguration

When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extract information about the running configuration from the dashboard. The root cause of the issue is a misconfiguration of the Cross-Origin Re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T11:53:13.444Z. Updated 2026-03-31T13:20:22.473Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated31 Mar 2026, 20:20 WIB

Official record

LowPublished 31 Mar 2026, 18:50 WIB

CVE-2026-0396

HTML injection in the web dashboard

An attacker might be able to inject HTML content into the internal web dashboard by sending crafted DNS queries to a DNSdist instance where domain-based dynamic rules have been enabled via either DynBlockRulesGroup:setSuffixMatchRule or DynBlockRulesGroup:setSuffixMatchRuleFFI.

Excerpt language: en.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T11:50:51.442Z. Updated 2026-03-31T13:21:08.549Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated31 Mar 2026, 20:21 WIB

Official record

LowPublished 31 Mar 2026, 18:17 WIB

CVE-2026-34506

OpenClaw < 2026.3.8 - Sender Allowlist Bypass in Microsoft Teams Plugin via Route Allowlist Configuration

OpenClaw before 2026.3.8 contains a sender allowlist bypass vulnerability in its Microsoft Teams plugin that allows unauthorized senders to bypass intended authorization checks. When a team/channel route allowlist is configured with an empty groupAllowFrom parameter, the message handler synthesizes wildcard sender auth…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T11:17:21.379Z. Updated 2026-06-23T16:15:43.180Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated23 Jun 2026, 23:15 WIB

Official record

LowPublished 31 Mar 2026, 18:17 WIB

CVE-2026-32970

OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs

OpenClaw before 2026.3.11 contains a credential fallback vulnerability where unavailable local gateway.auth.token and gateway.auth.password SecretRefs are treated as unset, allowing fallback to remote credentials in local mode. Attackers can exploit misconfigured local auth references to cause CLI and helper paths to s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T11:17:16.527Z. Updated 2026-06-23T16:15:23.343Z.

CVSS2.5v3.1KEVNot listedEPSSPresentUpdated23 Jun 2026, 23:15 WIB

Official record

LowPublished 31 Mar 2026, 09:04 WIB

CVE-2026-34073

cryptography has incomplete DNS name constraint enforcement on peer names

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child certificates, and not the "peer name" presented during each validation. Consequently, cryptography would allow a peer named …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T02:04:36.275Z. Updated 2026-10-14T16:07:55.097Z.

CVSS1.7v4.0KEVNot listedEPSSPresentUpdated14 Oct 2026, 23:07 WIB

Official record

LowPublished 31 Mar 2026, 07:54 WIB

CVE-2026-5115

Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices

The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking. The PaperCut NG/MF Embedded application is a software interface that runs directly on the touch screen of a multi-function device. It was internally discovered that the communication channel betwe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:54:48.889Z. Updated 2026-03-31T13:59:35.485Z.

CVSS3.6v4.0KEVNot listedEPSSPresentUpdated31 Mar 2026, 20:59 WIB

Official record

LowPublished 31 Mar 2026, 07:39 WIB

CVE-2026-4794

Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF

Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML code via different UI fields. This could be used to compromise other admininistrator's sessions or perform unauthorized actions via the administrator's auth…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:39:56.135Z. Updated 2026-03-31T14:03:59.735Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated31 Mar 2026, 21:03 WIB

Official record

LowPublished 31 Mar 2026, 03:11 WIB

CVE-2026-32696

NanoMQ HTTP Auth: Missing username/password can trigger a NULL-pointer strlen() in auth_http.c:set_data(), causing a process crash — SIGSEGV, remotely triggerable

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In NanoMQ version 0.24.6, after enabling auth.http_auth (HTTP authentication), when a client connects to the broker using MQTT CONNECT without providing username/password, and the configuration params uses the placeholders %u / %P (e.g., username="%u…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-30T20:11:30.580Z. Updated 2026-03-31T15:24:06.506Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated31 Mar 2026, 22:24 WIB

Official record

LowPublished 31 Mar 2026, 02:07 WIB

CVE-2026-21716

CVE-2026-21716

An incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the promises API without the required permission checks, while their callback-based equivalents (`fs.fchmod()`, `fs.fchown()`) were correctly patched. As a result, code running under `--permission` with restricted `--allow-f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.3 v3.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-30T19:07:28.538Z. Updated 2026-03-31T14:27:23.323Z.

CVSS3.3v3.0KEVNot listedEPSSPresentUpdated31 Mar 2026, 21:27 WIB

Official record

LowPublished 31 Mar 2026, 02:07 WIB

CVE-2026-21715

CVE-2026-21715

A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync.native()` without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under `--permission` with restricted `--allow-fs-read` can still use `fs.realpathSync.na…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.3 v3.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-30T19:07:28.507Z. Updated 2026-09-17T18:36:37.076Z.

CVSS3.3v3.0KEVNot listedEPSSPresentUpdated18 Sep 2026, 01:36 WIB

Official record

LowPublished 31 Mar 2026, 00:06 WIB

CVE-2025-66215

OpenSC: Stack-buffer-overflow WRITE in card-oberthur

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow WRITE in card-oberthur. The attack requires crafted USB device or smart card that would present the system …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-30T17:06:16.996Z. Updated 2026-03-31T18:53:46.404Z.

CVSS3.8v3.1KEVNot listedEPSSPresentUpdated01 Apr 2026, 01:53 WIB

Official record

LowPublished 31 Mar 2026, 00:03 WIB

CVE-2025-66038

OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a compact-TLV buffer for a given tag. In compact-TLV, a single byte encodes the tag (high nibble) and value length (low nibble). With a 1-byte buffer {0x0A}, the encoded element claims tag=0 and length=10 …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-30T17:03:55.914Z. Updated 2026-04-01T18:15:33.347Z.

CVSS3.9v3.1KEVNot listedEPSSPresentUpdated02 Apr 2026, 01:15 WIB

Official record

LowPublished 31 Mar 2026, 00:01 WIB

CVE-2025-66037

OpenSC: Out of Bounds vulnerability

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_pkcs15_reader harness causes OpenSC to perform an out-of-bounds heap read in the X.509/SPKI handling path. Specifically, sc_pkcs15_pubkey_from_spki_fields() allocates a zero-length buffer and then read…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-30T17:01:27.790Z. Updated 2026-03-30T20:14:39.203Z.

CVSS3.9v3.1KEVNot listedEPSSPresentUpdated31 Mar 2026, 03:14 WIB

Official record

LowPublished 30 Mar 2026, 23:59 WIB

CVE-2025-49010

OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE

OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow write in GET RESPONSE. The attack requires crafted USB device or smart card that would present the system w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-30T16:59:25.810Z. Updated 2026-03-30T18:38:21.684Z.

CVSS3.8v3.1KEVNot listedEPSSPresentUpdated31 Mar 2026, 01:38 WIB

Official record

LowPublished 30 Mar 2026, 21:08 WIB

CVE-2026-28528

BlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined Behavior

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GET_FOLDER_ITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connection can exploit insufficient bounds checking on the attr_id …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-30T14:08:00.891Z. Updated 2026-07-14T18:39:46.312Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 01:39 WIB

Official record