Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 2,456 published records · 3 KEV · 2,456 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

2,456 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit00.00%
High00.00%
Med2,456100%
Low00.00%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

Apr 262,456

Signal coverage

KEV-listed: 3
With a forecast: 2,456
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 0.12% · forecast 100% · unscored 0.00%.

Showing 1–20 of 2,456By severity band: Critical · 9.0–10.0 0, High · 7.0–8.9 0, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

MedPublished 01 May 2026, 06:17 WIB

CVE-2026-22726

Route Services Firewall Bypass

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudfoundry could configure a route-service that would allow it to send requests to HTTP services on internal networks reachable by the Gorouter, wh…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T23:17:00.707Z. Updated 2026-05-01T14:19:13.594Z.

CVSS5v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 21:19 WIB

Official record

MedPublished 01 May 2026, 06:04 WIB

CVE-2026-5404

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Excerpt language: en.

Severity medium: primary CNA CVSS 4.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T23:04:08.537Z. Updated 2026-05-01T14:20:15.602Z.

Showing 1 to 20 of 2456.Next page

CVSS4.7v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 21:20 WIB

Official record

MedPublished 01 May 2026, 06:00 WIB

CVE-2026-7510

OWAP DefectDojo Benchmark/Engagement/Product/Survey authorization

A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an unknown functionality of the component Benchmark/Engagement/Product/Survey. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The exploit has been publicly disclosed and may…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T23:00:24.288Z. Updated 2026-05-01T19:30:20.129Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated02 May 2026, 02:30 WIB

Official record

MedPublished 01 May 2026, 05:45 WIB

CVE-2026-7508

Bootstrap CMS Page Creation show.blade.php code injection

A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. Performing a manipulation of the argument body results in code injection. Remote exploitation of the attack is possible. The exploit has been m…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T22:45:14.459Z. Updated 2026-05-04T13:26:53.234Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated04 May 2026, 20:26 WIB

Official record

MedPublished 01 May 2026, 05:30 WIB

CVE-2026-7506

SourceCodester Hotel Management System check sql injection

A vulnerability has been found in SourceCodester Hotel Management System 1.0. This impacts an unknown function of the file /index.php/reservation/check. Such manipulation of the argument room_type leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T22:30:14.745Z. Updated 2026-05-01T14:21:30.732Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 21:21 WIB

Official record

MedPublished 01 May 2026, 05:00 WIB

CVE-2026-7505

nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 3.9.0 mitigates this is…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T22:00:16.529Z. Updated 2026-05-01T21:24:33.058Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated02 May 2026, 04:24 WIB

Official record

MedPublished 01 May 2026, 04:49 WIB

CVE-2026-1577

IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueries

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:49:24.614Z. Updated 2026-05-10T13:21:48.830Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated10 May 2026, 20:21 WIB

Official record

MedPublished 01 May 2026, 04:48 WIB

CVE-2025-36122

IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automatic

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of service using a specially crafted SQL query due to improper allocation of system resources.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:48:49.826Z. Updated 2026-05-27T16:34:17.558Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 23:34 WIB

Official record

MedPublished 01 May 2026, 04:48 WIB

CVE-2025-14688

IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when certain configurations exist.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:48:11.642Z. Updated 2026-05-27T16:33:29.099Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 23:33 WIB

Official record

MedPublished 01 May 2026, 04:45 WIB

CVE-2026-2311

IBM i is affected by a privilege escalation vulnerability in Web Administration GUI []

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check. A malicious actor could cause user-controlled code to run with administrator privilege.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:45:08.343Z. Updated 2026-05-02T03:55:31.329Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated02 May 2026, 10:55 WIB

Official record

MedPublished 01 May 2026, 04:28 WIB

CVE-2025-36180

Inadequate Pod Communication Restrictions, affects watsonx.data

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:28:00.171Z. Updated 2026-05-01T16:37:49.064Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 23:37 WIB

Official record

MedPublished 01 May 2026, 04:16 WIB

CVE-2026-6542

Monitor API allows cross-user read of transaction logs and deletion of build data via flow_id

IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted vertex build data for another user's flow.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:16:10.787Z. Updated 2026-05-01T15:00:43.375Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 22:00 WIB

Official record

MedPublished 01 May 2026, 04:15 WIB

CVE-2026-7502

LinkStackOrg LinkStack Management Endpoint UserController.php saveLink authorization

A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6. The affected element is the function saveLink of the file app/Http/Controllers/UserController.php of the component Management Endpoint. The manipulation leads to authorization bypass. The attack can be initiated remotely. The exploit has …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:15:12.518Z. Updated 2026-05-01T14:23:54.744Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 21:23 WIB

Official record

MedPublished 01 May 2026, 04:12 WIB

CVE-2025-36335

Vulnerabilities found

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:12:54.030Z. Updated 2026-05-01T14:23:11.089Z.

CVSS6.2v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 21:23 WIB

Official record

MedPublished 01 May 2026, 04:11 WIB

CVE-2026-3345

Path Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint

IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:11:20.614Z. Updated 2026-05-27T12:23:58.817Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated27 May 2026, 19:23 WIB

Official record

MedPublished 01 May 2026, 04:06 WIB

CVE-2026-3346

Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRaw

IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:06:10.276Z. Updated 2026-05-01T16:38:14.702Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 23:38 WIB

Official record

MedPublished 01 May 2026, 04:04 WIB

CVE-2026-3340

Server-Side Request Forgery (SSRF) in Langflow URL Component

IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T21:04:14.027Z. Updated 2026-05-01T16:38:23.079Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated01 May 2026, 23:38 WIB

Official record

MedPublished 01 May 2026, 03:57 WIB

CVE-2026-4502

Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API

IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T20:57:08.130Z. Updated 2026-06-12T20:28:41.538Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated13 Jun 2026, 03:28 WIB

Official record

MedPublished 01 May 2026, 03:45 WIB

CVE-2026-7501

LinkStackOrg LinkStack UserController.php editPage cross site scripting

A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a manipulation of the argument pageDescription can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T20:45:12.021Z. Updated 2026-05-01T19:30:37.795Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated02 May 2026, 02:30 WIB

Official record

MedPublished 01 May 2026, 03:39 WIB

CVE-2026-41263

Traefik: BasicAuth middleware: timing side-channel vulnerability

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a timing side-channel vulnerability in Traefik's BasicAuth middleware that allows an attacker to enumerate valid usernames through response-time differences. The variable intended to hold a constant-time fall…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-30T20:39:49.658Z. Updated 2026-05-01T14:22:40.566Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated01 May 2026, 21:22 WIB

Official record