Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 2,118 published records · 7 KEV · 2,118 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

2,118 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit00.00%
High2,118100%
Med00.00%
Low00.00%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

May 262,118

Signal coverage

KEV-listed: 7
With a forecast: 2,118
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 0.33% · forecast 100% · unscored 0.00%.

Showing 1–20 of 2,118By severity band: Critical · 9.0–10.0 0, High · 7.0–8.9 2,118, Medium · 4.0–6.9 0, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

HighPublished 31 May 2026, 23:00 WIB

CVE-2026-10192

Tenda W12 httpd set_local_time_0 stack-based overflow

A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function set_local_time_0 of the file /bin/httpd. Such manipulation of the argument Time leads to stack-based buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T16:00:13.456Z. Updated 2026-06-01T12:29:51.172Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 19:29 WIB

Official record

HighPublished 31 May 2026, 22:45 WIB

CVE-2026-10191

Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow

A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function cgiWifiMacFilterSet of the file /bin/httpd. This manipulation of the argument wifiMacFilterSet.macList.mac causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be util…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1 to 20 of 2118.Next page

Published 2026-05-31T15:45:14.535Z. Updated 2026-06-01T15:24:11.577Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:24 WIB

Official record

HighPublished 31 May 2026, 22:30 WIB

CVE-2026-10190

Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service

A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The manipulation of the argument web_over_time results in denial of service. It is possible to launch the attack remotely. The exploit has been made…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T15:30:13.999Z. Updated 2026-06-01T15:04:52.891Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:04 WIB

Official record

HighPublished 31 May 2026, 22:00 WIB

CVE-2026-10189

Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow

A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T15:00:14.812Z. Updated 2026-06-01T13:28:34.971Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 20:28 WIB

Official record

HighPublished 31 May 2026, 21:30 WIB

CVE-2026-10188

Tenda W12 httpd cgistaKickOff stack-based overflow

A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the file /bin/httpd. Executing a manipulation of the argument staMac can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T14:30:12.458Z. Updated 2026-06-02T14:53:18.148Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 21:53 WIB

Official record

HighPublished 31 May 2026, 20:15 WIB

CVE-2026-10183

TRENDnet TEW-432BRP formWlanSetup stack-based overflow

A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. This affects the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument enrollee leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T13:15:08.573Z. Updated 2026-06-01T13:29:11.362Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 20:29 WIB

Official record

HighPublished 31 May 2026, 19:45 WIB

CVE-2026-10181

TRENDnet TEW-432BRP formSysCmd stack-based overflow

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysCmd of the file /goform/formSysCmd. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T12:45:07.166Z. Updated 2026-06-02T14:46:57.334Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 21:46 WIB

Official record

HighPublished 31 May 2026, 19:07 WIB

CVE-2026-49490

OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column

OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling that allows authenticated attackers to inject SQL through crafted filters targeting the non-filterable Tags column in the Candidates DataGrid. Attackers can bypass column filterable restrictions by manipulating filter reque…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T12:07:55.331Z. Updated 2026-06-01T15:01:25.680Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:01 WIB

Official record

HighPublished 31 May 2026, 19:04 WIB

CVE-2026-49489

OpenCATS - SQL Injection in DataGrid sortDirection Parameter

OpenCATS through 0.9.7.4 contains a sql injection vulnerability in the sortDirection parameter of the DataGrid component that allows authenticated users to extract database contents. Attackers can inject malicious SQL via the sortDirection parameter in ajax/getDataGridPager.php to perform time-based blind injection att…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T12:04:48.034Z. Updated 2026-06-01T15:24:26.649Z.

CVSS8.4v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:24 WIB

Official record

HighPublished 31 May 2026, 18:00 WIB

CVE-2026-10179

TRENDnet TEW-432BRP formSetWlanEncrypt stack-based overflow

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEncrypt of the file /goform/formSetWlanEncrypt. This manipulation of the argument webpage causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used. T…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T11:00:10.666Z. Updated 2026-06-01T21:43:59.026Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 04:43 WIB

Official record

HighPublished 31 May 2026, 10:00 WIB

CVE-2026-10165

Edimax BR-6478AC POST Request formWanTcpipSetup stack-based overflow

A vulnerability was identified in Edimax BR-6478AC 1.23. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack may be performed from remote. The ex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T03:00:10.931Z. Updated 2026-06-01T13:28:00.283Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 20:28 WIB

Official record

HighPublished 31 May 2026, 09:30 WIB

CVE-2026-10164

Edimax BR-6478AC POST Request formUSBFolder buffer overflow

A vulnerability was found in Edimax BR-6478AC 1.23. Impacted is the function formUSBFolder of the file /goform/formUSBFolder of the component POST Request Handler. The manipulation of the argument ShareName/SelectName results in buffer overflow. The attack can be executed remotely. The exploit has been made public and …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T02:30:08.775Z. Updated 2026-06-02T02:19:37.543Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 09:19 WIB

Official record

HighPublished 31 May 2026, 09:15 WIB

CVE-2026-10163

Edimax BR-6478AC POST Request formUSBAccount buffer overflow

A vulnerability has been found in Edimax BR-6478AC 1.23. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. The manipulation of the argument UserName/Password leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has be…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T02:15:08.626Z. Updated 2026-06-02T02:18:07.614Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 09:18 WIB

Official record

HighPublished 31 May 2026, 09:00 WIB

CVE-2026-10162

TRENDnet TEW-432BRP formSetPassword stack-based overflow

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This vulnerability affects the function formSetPassword of the file /goform/formSetPassword. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T02:00:12.314Z. Updated 2026-06-01T14:35:42.911Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 21:35 WIB

Official record

HighPublished 31 May 2026, 08:45 WIB

CVE-2026-10161

TRENDnet TEW-432BRP formResetStatistic stack-based overflow

A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function formResetStatistic of the file /goform/formResetStatistic. Performing a manipulation of the argument status_statistic results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T01:45:07.861Z. Updated 2026-06-01T15:24:53.198Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:24 WIB

Official record

HighPublished 31 May 2026, 08:30 WIB

CVE-2026-10160

TRENDnet TEW-432BRP formSetEnableWizard stack-based overflow

A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. Such manipulation of the argument start_wizard leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been di…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T01:30:09.425Z. Updated 2026-06-01T15:06:51.697Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:06 WIB

Official record

HighPublished 31 May 2026, 08:15 WIB

CVE-2026-10159

TRENDnet TEW-432BRP formSysLog stack-based overflow

A weakness has been identified in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSysLog of the file /goform/formSysLog. This manipulation of the argument current_page causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the pub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T01:15:08.867Z. Updated 2026-06-01T13:45:43.034Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 20:45 WIB

Official record

HighPublished 31 May 2026, 07:45 WIB

CVE-2026-10158

TRENDnet TEW-432BRP formPortFw stack-based overflow

A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. Affected is the function formPortFw of the file /goform/formPortFw. The manipulation of the argument server_name results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T00:45:08.477Z. Updated 2026-06-02T02:15:51.795Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 09:15 WIB

Official record

HighPublished 30 May 2026, 23:15 WIB

CVE-2026-10126

Edimax BR-6478AC POST Request formQoS buffer overflow

A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function formQoS of the file /goform/formQoS of the component POST Request Handler. The manipulation of the argument selSSID results in buffer overflow. The attack can be launched remotely. The exploit has been released to the p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-30T16:15:07.823Z. Updated 2026-06-01T14:55:05.171Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 21:55 WIB

Official record

HighPublished 30 May 2026, 23:00 WIB

CVE-2026-10125

Edimax BR-6478AC POST Request formPPPoESetup stack-based overflow

A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. The manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack can be initiated remotely. The ex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-30T16:00:12.552Z. Updated 2026-06-01T15:25:07.859Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:25 WIB

Official record