Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 1,718 published records · 3 KEV · 1,718 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

1,718 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit00.00%
High1,718100%
Med00.00%
Low00.00%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

Apr 261,718

Signal coverage

KEV-listed: 3
With a forecast: 1,718
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 0.17% · forecast 100% · unscored 0.00%.

Showing 1–20 of 1,718By severity band: Critical · 9.0–10.0 0, High · 7.0–8.9 1,718, Medium · 4.0–6.9 0, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

HighPublished 01 May 2026, 06:45 WIB

CVE-2026-7513

UTT HiPER 1200GW formRemoteControl strcpy buffer overflow

A vulnerability has been found in UTT HiPER 1200GW up to 2.5.3-170306. The impacted element is the function strcpy of the file /goform/formRemoteControl. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T23:45:10.007Z. Updated 2026-05-04T16:55:44.348Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated04 May 2026, 23:55 WIB

Official record

HighPublished 01 May 2026, 06:30 WIB

CVE-2026-7512

UTT HiPER 1200GW formUser strcpy buffer overflow

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-1703. The affected element is the function strcpy of the file /goform/formUser. Executing a manipulation can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T23:30:13.124Z. Updated 2026-05-01T14:18:41.695Z.

Showing 1 to 20 of 1718.Next page

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 21:18 WIB

Official record

HighPublished 01 May 2026, 06:04 WIB

CVE-2026-5403

Heap-based Buffer Overflow in Wireshark

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T23:04:03.523Z. Updated 2026-07-15T00:43:53.843Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated15 Jul 2026, 07:43 WIB

Official record

HighPublished 01 May 2026, 06:03 WIB

CVE-2026-5656

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Excerpt language: en.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T23:03:58.516Z. Updated 2026-07-15T00:42:33.553Z.

CVSS7v3.1KEVNot listedEPSSPresentUpdated15 Jul 2026, 07:42 WIB

Official record

HighPublished 01 May 2026, 06:03 WIB

CVE-2026-5405

Heap-based Buffer Overflow in Wireshark

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T23:03:53.654Z. Updated 2026-07-15T00:43:51.365Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated15 Jul 2026, 07:43 WIB

Official record

HighPublished 01 May 2026, 04:45 WIB

CVE-2026-7503

code-projects for Plugin cstecgi.cgi setWiFiMultipleConfig buffer overflow

A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137. The impacted element is the function setWiFiMultipleConfig in the library /lib/cste_modules/wireless.so of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument wepkey2 results in buffer overflow. The attack can be launched remotely. The e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:45:11.565Z. Updated 2026-05-04T16:56:29.317Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated04 May 2026, 23:56 WIB

Official record

HighPublished 01 May 2026, 04:29 WIB

CVE-2026-7551

HKUDS OpenHarness Remote Command Execution via /bridge Slash Command

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded to the bridge session …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:29:17.362Z. Updated 2026-07-14T22:03:55.652Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 05:03 WIB

Official record

HighPublished 01 May 2026, 04:17 WIB

CVE-2026-6389

IBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerability

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted read access to all secrets. An attacker that compromises the operator or its service account can exfiltrate sensitive credentials, escalate privileges, a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:17:06.371Z. Updated 2026-05-01T16:37:57.048Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 23:37 WIB

Official record

HighPublished 01 May 2026, 04:11 WIB

CVE-2026-6543

Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow. This allows reading sensitive environment variables (API keys, DB credentials), modifying files, or launching further attacks on the internal network.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:11:54.483Z. Updated 2026-05-02T03:55:24.549Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated02 May 2026, 10:55 WIB

Official record

HighPublished 01 May 2026, 03:48 WIB

CVE-2026-4503

Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint

IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T20:48:17.662Z. Updated 2026-06-12T18:09:02.284Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated13 Jun 2026, 01:09 WIB

Official record

HighPublished 01 May 2026, 03:38 WIB

CVE-2026-40912

Traefik: StripPrefixRegex auth bypass via Path/RawPath desync

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass vulnerability in Traefik's StripPrefixRegex middleware when used in combination with ForwardAuth, BasicAuth, or DigestAuth. The middleware matches the regex against the d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T20:38:21.969Z. Updated 2026-07-15T01:00:23.492Z.

CVSS7.8v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:00 WIB

Official record

HighPublished 01 May 2026, 03:26 WIB

CVE-2026-39858

Traefik: Forwarded alias spoofing top pre-auth decision bypass

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a high severity authentication bypass vulnerability in Traefik's ForwardAuth and snippet-based authentication middleware. Traefik's forwarded-header sanitization logic targets only canonical header names (e.g…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T20:26:26.300Z. Updated 2026-07-15T01:01:48.271Z.

CVSS7.8v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:01 WIB

Official record

HighPublished 01 May 2026, 03:26 WIB

CVE-2026-35051

Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traefik's ForwardAuth middleware when trustForwardHeader=false is configured and Traefik is deployed behind a trusted upstream proxy. This issue has been patched in v…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T20:26:06.716Z. Updated 2026-07-15T01:03:12.192Z.

CVSS7.8v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:03 WIB

Official record

HighPublished 01 May 2026, 03:19 WIB

CVE-2026-40950

Buffer overflow in the Secure Access server prior to 14.50

CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially crafted message to the server and cause a denial of service

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T20:19:11.609Z. Updated 2026-05-01T14:31:19.868Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 21:31 WIB

Official record

HighPublished 01 May 2026, 03:09 WIB

CVE-2026-7435

SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString

SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without parameterization or sanitization. Attackers can craft encrypted payloads submitted to the /api/stl/actions/dynamic endpoint to execute arbitrary SQL statements, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T20:09:17.935Z. Updated 2026-07-28T01:50:03.577Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated28 Jul 2026, 08:50 WIB

Official record

HighPublished 01 May 2026, 03:08 WIB

CVE-2026-33451

Arbitrary read/write vulnerability in Windows clients prior to 14.50

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system.

Excerpt language: en.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T20:08:03.213Z. Updated 2026-05-01T14:36:19.832Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 21:36 WIB

Official record

HighPublished 01 May 2026, 01:35 WIB

CVE-2026-7461

OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials

Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticated threat actor to execute shell commands with SYSTEM privileges on the underlying host via a specially crafted username …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T18:35:17.599Z. Updated 2026-05-01T03:56:01.010Z.

CVSS7.5v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 10:56 WIB

Official record

HighPublished 01 May 2026, 01:22 WIB

CVE-2026-40601

Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh toggle

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes POST /api/chart/:chart_id/query without authentication. The endpoint only checks team.allowReportRefresh and does not verify that the target chart belongs to…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T18:22:43.557Z. Updated 2026-05-04T13:23:24.286Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated04 May 2026, 20:23 WIB

Official record

HighPublished 01 May 2026, 01:22 WIB

CVE-2026-40600

Chartbrew: Incorrect Access Control in project share policy routes via unbound policy_id

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew allows authenticated users with access to one project to update or delete a SharePolicy record that belongs to a different project. The affected routes authorize the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T18:22:16.038Z. Updated 2026-04-30T18:51:59.306Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 01:51 WIB

Official record

HighPublished 01 May 2026, 01:21 WIB

CVE-2026-40595

Chartbrew: Incorrect Access Control in public chart and export routes via missing onReport and SharePolicy checks

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes public chart retrieval and export routes that only verify project-level public access and, for exports, a team-level export toggle. The routes do not verify …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T18:21:28.551Z. Updated 2026-04-30T19:02:16.378Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 02:02 WIB

Official record