Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 458 published records · 5 KEV · 458 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

458 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit458100%
High00.00%
Med00.00%
Low00.00%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

Apr 26458

Signal coverage

KEV-listed: 5
With a forecast: 458
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 1.1% · forecast 100% · unscored 0.00%.

Showing 1–20 of 458By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 0, Medium · 4.0–6.9 0, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

CritPublished 30 Apr 2026, 23:08 WIB

CVE-2022-50993

Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet

Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary filenames and disguised content types. Attackers can upload PH…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T16:08:46.184Z. Updated 2026-07-15T01:24:49.115Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:24 WIB

Official record

CritPublished 30 Apr 2026, 23:08 WIB

CVE-2025-71284

Synway SMG Gateway Management Software OS Command Injection via radius_address

Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST parameter is split and interpolated directly into a sed command without sanitization. An unauthenticated remote attacker can inject arbitrary shel…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1 to 20 of 458.Next page

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T16:08:17.336Z. Updated 2026-04-30T18:06:54.755Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 01:06 WIB

Official record

CritPublished 30 Apr 2026, 22:06 WIB

CVE-2026-4670

Improper Authentication vulnerability in Progress MOVEit Automation

Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T15:06:11.600Z. Updated 2026-05-01T03:55:57.784Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 10:55 WIB

Official record

CritPublished 30 Apr 2026, 02:24 WIB

CVE-2018-25318

Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change

Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS servers and redirect user…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-29T19:24:46.207Z. Updated 2026-10-01T21:44:52.133Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated02 Oct 2026, 04:44 WIB

Official record

CritPublished 30 Apr 2026, 02:24 WIB

CVE-2018-25317

Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change

Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin language cookie …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-29T19:24:45.523Z. Updated 2026-09-30T17:19:45.399Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 00:19 WIB

Official record

CritPublished 30 Apr 2026, 02:24 WIB

CVE-2018-25316

Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change

Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send GET requests to the goform/AdvSetDns endpoint with a crafted admin language cookie to change DNS servers and redirect us…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-29T19:24:44.836Z. Updated 2026-07-15T01:23:33.878Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:23 WIB

Official record

CritPublished 30 Apr 2026, 00:55 WIB

CVE-2026-30893

Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peer

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path traversal vulnerability in Wazuh's cluster synchronization extraction routine allows an authenticated cluster peer to write arbitrary files outside the intended extraction di…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-29T17:55:12.493Z. Updated 2026-04-29T19:29:26.152Z.

CVSS9v3.1KEVNot listedEPSSPresentUpdated30 Apr 2026, 02:29 WIB

Official record

CritPublished 30 Apr 2026, 00:37 WIB

CVE-2026-26015

Unauthenticated RCE in DocsGPT MCP STDIO Configuration

DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing both the official DocsGPT website or any local and public deployment, can craft a malicious payload bypassing the "MCP test" behavior to achieve arbitrary remote code execution (RCE). This issue has been…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-29T17:37:25.524Z. Updated 2026-05-06T19:43:48.147Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated07 May 2026, 02:43 WIB

Official record

CritKEVPublished 29 Apr 2026, 22:10 WIB

CVE-2026-41940

WebPros cPanel and WHM Authentication Bypass via Login Flow

cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.

Published 2026-04-29T15:10:37.899Z. Updated 2026-09-30T17:20:17.713Z.

CVSS9.3v4.0KEVListedEPSSPresentUpdated01 Oct 2026, 00:20 WIB

Official record

CritPublished 29 Apr 2026, 21:33 WIB

CVE-2026-5166

Path Traversal in TUBITAK BILGEM's Pardus Software Center

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Path Traversal. This issue affects Pardus Software Center: before 0.6.4.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-29T14:33:34.786Z. Updated 2026-06-06T07:47:09.301Z.

CVSS9.6v3.1KEVNot listedEPSSPresentUpdated06 Jun 2026, 14:47 WIB

Official record

CritPublished 29 Apr 2026, 15:37 WIB

CVE-2026-3325

SQL injection in MegaCMS by CRM Sistemas de Fidelización

SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint. The vulnerability arises from inadequate validation and sanitisation of user input. Specifically, via a POST request, the “id_territorio” parameter, used immediately after the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-29T08:37:32.529Z. Updated 2026-04-29T12:06:07.199Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated29 Apr 2026, 19:06 WIB

Official record

CritPublished 29 Apr 2026, 04:15 WIB

CVE-2026-41446

WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints

Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and service tag for authentication, both of which are printed in plaintext on the physical device label. Attackers with access to the device label or documentati…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-28T21:15:09.360Z. Updated 2026-05-14T02:09:45.480Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated14 May 2026, 09:09 WIB

Official record

CritPublished 29 Apr 2026, 01:09 WIB

CVE-2026-41386

OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes

OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap setup codes are not bound to intended device roles and scopes during pairing. Attackers can exploit this during first-use device pairing to escalate privileges beyond their intended role and scope.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-28T18:09:48.856Z. Updated 2026-04-29T12:49:41.640Z.

CVSS9.1v4.0KEVNot listedEPSSPresentUpdated29 Apr 2026, 19:49 WIB

Official record

CritPublished 29 Apr 2026, 00:44 WIB

CVE-2026-24178

CVE-2026-24178

NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A successful exploit of this vulnerability may lead to privilege escalation, data tampering, information disclosure, code execu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-28T17:44:51.538Z. Updated 2026-04-29T15:12:11.976Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated29 Apr 2026, 22:12 WIB

Official record

CritPublished 29 Apr 2026, 00:34 WIB

CVE-2026-3893

Carlson Software VASCO-B GNSS Receiver Missing Authentication for Critical Function

The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and operational functions without needing credentials.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-28T17:34:56.130Z. Updated 2026-04-29T15:12:29.585Z.

CVSS9.4v3.1KEVNot listedEPSSPresentUpdated29 Apr 2026, 22:12 WIB

Official record

CritPublished 28 Apr 2026, 20:43 WIB

CVE-2026-27760

OpenCATS PHP Code Injection via installer AJAX endpoint

OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action parameter. Attackers can break out of the define() string context in config.php usi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-28T13:43:24.366Z. Updated 2026-07-14T18:39:39.723Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 01:39 WIB

Official record

CritPublished 28 Apr 2026, 18:41 WIB

CVE-2026-5779

Multiple vulnerabilities in MphRx's Minerva

An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint. This allows an authenticated user to modify the information of other registered users. Successful exploitation of this vulnerability allows an authenticated user to modify …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-28T11:41:35.416Z. Updated 2026-04-28T13:45:36.183Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated28 Apr 2026, 20:45 WIB

Official record

CritPublished 28 Apr 2026, 15:45 WIB

CVE-2026-7248

D-Link DI-8100 CGI Endpoint tgfile.htm tgfile_htm buffer overflow

A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-28T08:45:12.356Z. Updated 2026-04-29T14:21:29.693Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated29 Apr 2026, 21:21 WIB

Official record

CritPublished 28 Apr 2026, 15:15 WIB

CVE-2026-7244

Totolink A8000RU CGI cstecgi.cgi setWiFiEasyGuestCfg os command injection

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument merge results in os command injection. It is possible to launch the attack remotely. The e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-28T08:15:14.987Z. Updated 2026-04-28T14:05:10.753Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated28 Apr 2026, 21:05 WIB

Official record

CritPublished 28 Apr 2026, 15:00 WIB

CVE-2026-7243

Totolink A8000RU CGI cstecgi.cgi setRadvdCfg os command injection

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument maxRtrAdvInterval leads to os command injection. It is possible to initiate the attack remotely. The ex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-28T08:00:16.213Z. Updated 2026-04-28T14:33:36.080Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated28 Apr 2026, 21:33 WIB

Official record