Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 739 published records · 13 KEV · 739 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

739 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit739100%
High00.00%
Med00.00%
Low00.00%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

Jun 26739

Signal coverage

KEV-listed: 13
With a forecast: 739
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 1.8% · forecast 100% · unscored 0.00%.

Showing 1–20 of 739By severity band: Critical · 9.0–10.0 739, High · 7.0–8.9 0, Medium · 4.0–6.9 0, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

CritPublished 01 Jul 2026, 05:54 WIB

CVE-2026-50110

Use of Hard-coded Credentials in StoneFly Storage Concentrator

Storage Concentrator (SC & SCVM) contains hardcoded credentials for numerous internal services embedded within a configuration file. While the credentials are stored in an encoded format, the encoding can be reversed to plaintext. The exposed credentials span a broad range of internal services, including database accou…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T22:54:42.362Z. Updated 2026-07-01T12:40:24.035Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated01 Jul 2026, 19:40 WIB

Official record

CritPublished 01 Jul 2026, 05:50 WIB

CVE-2026-56413

OS Command Injection in StoneFly Storage Concentrator

Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl service, which listens on TCP port 9000 by default and accepts custom network packets to perform device actions. An unauthenticated remote attacker can send a specially crafted packet containing a malicious payload that is …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1 to 20 of 739.Next page

Published 2026-06-30T22:50:58.131Z. Updated 2026-07-01T12:41:07.971Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated01 Jul 2026, 19:41 WIB

Official record

CritPublished 01 Jul 2026, 05:40 WIB

CVE-2026-56415

OS Command Injection in StoneFly Storage Concentrator

Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is reachable without authentication. A remote attacker can submit a specially crafted HTTP request containing a malicious payload that is processed without adequate input sanitization, resulting in arbitrary comm…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T22:40:55.582Z. Updated 2026-07-01T12:42:03.699Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated01 Jul 2026, 19:42 WIB

Official record

CritPublished 01 Jul 2026, 05:36 WIB

CVE-2026-55721

SQL Injection in StoneFly Storage Concentrator

Storage Concentrator (SC & SCVM) is vulnerable to SQL injection through cookie values processed by the login.pl and debug.pl scripts. The cookie value is incorporated directly into database queries without adequate sanitization, allowing an unauthenticated remote attacker to manipulate those queries and extract sensiti…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T22:36:22.639Z. Updated 2026-07-01T15:35:19.478Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated01 Jul 2026, 22:35 WIB

Official record

CritPublished 01 Jul 2026, 05:08 WIB

CVE-2026-56700

Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection

Grav CMS before 2.0.0-beta.2 contains multiple code-execution vulnerabilities. Three unsafe unserialize() calls - in Scheduler\JobQueue, Framework\Cache\Adapter\FileCache, and Session - deserialize untrusted data without restricting allowed classes, enabling PHP object injection and, via a gadget chain, arbitrary code …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T22:08:40.943Z. Updated 2026-10-08T15:23:25.438Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated08 Oct 2026, 22:23 WIB

Official record

CritPublished 01 Jul 2026, 05:08 WIB

CVE-2026-56278

Flowise - Session Hijacking via Weak Default Express Session Secret

Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret ('flowise') for the express-session middleware when the EXPRESS_SESSION_SECRET environment variable is not set (packages/server/src/enterprise/middleware/passport/index.ts). Because this default secret is publicly visible i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T22:08:27.947Z. Updated 2026-07-01T14:28:34.110Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated01 Jul 2026, 21:28 WIB

Official record

CritPublished 01 Jul 2026, 05:08 WIB

CVE-2026-56264

Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint

Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js endpoint, which accepts and executes arbitrary user-supplied JavaScript in the server's browser context with --disable-web-security enabled. An attacker can execute arbitrary JavaScript and, combined wi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T22:08:26.600Z. Updated 2026-07-14T21:34:12.124Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 04:34 WIB

Official record

CritPublished 01 Jul 2026, 04:27 WIB

CVE-2026-50003

OFFIS DCMTK Toolkit Path Traversal

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (../) paths and absolute paths.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T21:27:42.468Z. Updated 2026-07-01T15:39:24.236Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated01 Jul 2026, 22:39 WIB

Official record

CritPublished 01 Jul 2026, 04:06 WIB

CVE-2026-58449

txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter

txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs __import__ and getattr on the caller-supplied dotted path with no allowlist. When the API is exposed with no TOKEN configured (authentication is opt-in, s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T21:06:47.254Z. Updated 2026-07-14T22:03:04.255Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 05:03 WIB

Official record

CritPublished 01 Jul 2026, 03:02 WIB

CVE-2026-10109

IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T20:02:13.026Z. Updated 2026-07-01T17:27:00.915Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated02 Jul 2026, 00:27 WIB

Official record

CritPublished 01 Jul 2026, 02:56 WIB

CVE-2026-10134

Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows

IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify every flow, conversation, message, file upload, and saved component in the Langflow database, can connect to internal services, abuse cloud metadata endpoints, laterally move to other tenants …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T19:56:52.069Z. Updated 2026-07-01T17:27:28.738Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated02 Jul 2026, 00:27 WIB

Official record

CritPublished 01 Jul 2026, 02:55 WIB

CVE-2026-10140

Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode Subsystem

IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries. An authenticated attacker can manipulate cache state to cause requests from other users to be processed using incorrect upstream API credentials, leading to cross-tenant bi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T19:55:31.022Z. Updated 2026-08-11T22:52:49.520Z.

CVSS9.6v3.1KEVNot listedEPSSPresentUpdated12 Aug 2026, 05:52 WIB

Official record

CritPublished 01 Jul 2026, 02:47 WIB

CVE-2026-11708

IBM WebSphere Application Server is affected by a cross-site scripting vulnerability

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T19:47:31.481Z. Updated 2026-07-01T14:01:08.079Z.

CVSS9.3v3.1KEVNot listedEPSSPresentUpdated01 Jul 2026, 21:01 WIB

Official record

CritPublished 01 Jul 2026, 02:45 WIB

CVE-2026-11712

IBM WebSphere Application Server is affected by a cross-site scripting vulnerability

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T19:45:37.814Z. Updated 2026-07-01T13:24:16.490Z.

CVSS9.3v3.1KEVNot listedEPSSPresentUpdated01 Jul 2026, 20:24 WIB

Official record

CritPublished 01 Jul 2026, 02:16 WIB

CVE-2026-7663

Unauthenticated Cross-User MCP Resource Access and Tool Execution via Streamable Transport Authorization Bypass

IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T19:16:25.323Z. Updated 2026-07-01T03:56:01.122Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated01 Jul 2026, 10:56 WIB

Official record

CritPublished 01 Jul 2026, 02:15 WIB

CVE-2026-7803

Flow Validation Bypass via Empty Component Type Field

IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validation of flow nodes with missing or empty component type fields.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T19:15:45.194Z. Updated 2026-07-01T03:56:00.023Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated01 Jul 2026, 10:56 WIB

Official record

CritPublished 01 Jul 2026, 02:14 WIB

CVE-2026-7871

Insecure Deserialization in Redis Cache Backend

IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary code with full application privileges, compromising all secrets, data, and system integrity.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T19:14:39.815Z. Updated 2026-07-01T17:27:39.903Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated02 Jul 2026, 00:27 WIB

Official record

CritPublished 01 Jul 2026, 02:13 WIB

CVE-2026-7873

Code Injection Vulnerability in Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T19:13:16.331Z. Updated 2026-07-01T17:27:51.362Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated02 Jul 2026, 00:27 WIB

Official record

CritPublished 01 Jul 2026, 02:11 WIB

CVE-2026-7874

Weak Cryptographic Key Derivation Exposed All Stored Credentials

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak and reversible key derivation mechanism for encryption at rest.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T19:11:43.653Z. Updated 2026-07-02T03:55:51.678Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated02 Jul 2026, 10:55 WIB

Official record

CritPublished 01 Jul 2026, 01:44 WIB

CVE-2026-58138

Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to authentication. Attack…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-06-30T18:44:12.734Z. Updated 2026-07-14T21:34:50.585Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 04:34 WIB

Official record