Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,357 published records · 1 KEV · 3,357 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,357 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit00.00%
High00.00%
Med3,357100%
Low00.00%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

Aug 263,357

Signal coverage

KEV-listed: 1
With a forecast: 3,357
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 0.03% · forecast 100% · unscored 0.00%.

Showing 1–20 of 3,357By severity band: Critical · 9.0–10.0 0, High · 7.0–8.9 0, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

MedPublished 01 Sep 2026, 05:00 WIB

CVE-2026-82957

hyperledger-firefly Webhook Subscription webhooks.go ValidateOptions server-side request forgery

A vulnerability was found in hyperledger-firefly firefly up to 1.4.0. The impacted element is the function ValidateOptions of the file internal/events/webhooks/webhooks.go of the component Webhook Subscription. Performing a manipulation of the argument url results in server-side request forgery. Remote exploitation of …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T22:00:11.629Z. Updated 2026-09-01T14:26:29.045Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:26 WIB

Official record

MedPublished 01 Sep 2026, 04:41 WIB

CVE-2026-82398

pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/_utils.py function read_until_whitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes concatenation in a on…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1 to 20 of 3357.Next page

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T21:41:10.272Z. Updated 2026-09-01T14:57:30.866Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:57 WIB

Official record

MedPublished 01 Sep 2026, 04:30 WIB

CVE-2026-82922

ShopEx ECShop flow.php flow_update_cart sql injection

A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability affects the function flow_update_cart of the file /flow.php?step=update_cart. The manipulation of the argument rec_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T21:30:36.877Z. Updated 2026-09-01T13:21:20.791Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 20:21 WIB

Official record

MedPublished 01 Sep 2026, 04:23 WIB

CVE-2026-82396

Sulu: Stored XSS via media download inline-disposition override

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller/MediaStreamController.php allows the /media/{id}/download/{slug} route and its administration variant to honor the inline query parameter for scriptable MIME ty…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T21:23:16.852Z. Updated 2026-09-01T14:29:00.823Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:29 WIB

Official record

MedPublished 01 Sep 2026, 04:22 WIB

CVE-2026-77353

Wallos: iCalendar Injection via CRLF in Subscription Name/Notes Export

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar properties and events into their exported .ics feed by embedding raw CRLF sequences in subscription names or notes. Because the input validation layer only encod…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T21:22:35.147Z. Updated 2026-09-03T17:37:08.487Z.

CVSS4.6v3.1KEVNot listedEPSSPresentUpdated04 Sep 2026, 00:37 WIB

Official record

MedPublished 01 Sep 2026, 04:21 WIB

CVE-2026-77352

Wallos: Authenticated SSRF via per-user SMTP notification host (low-privilege user)

Wallos is an open-source, self-hostable personal subscription tracker. From version 2.0.0 to before version 5.0.0, any authenticated Wallos user (no admin rights required) can make the server open arbitrary outbound SMTP connections to internal/link-local addresses, by setting the SMTP host of their personal email noti…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T21:21:06.895Z. Updated 2026-09-01T14:57:40.014Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:57 WIB

Official record

MedPublished 01 Sep 2026, 04:20 WIB

CVE-2026-82395

Sulu: Media move/update authorization bypass (IDOR)

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the media move endpoint derives its permission check from the client-supplied collection value instead of the media item's actual source collection, and src/Sulu/Bundle/MediaBundle/Media/Manager/Medi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T21:20:58.926Z. Updated 2026-09-01T13:22:32.921Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 20:22 WIB

Official record

MedPublished 01 Sep 2026, 04:17 WIB

CVE-2026-82394

Sulu: Fix authorization bypass when creating preview links

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the preview-link endpoint and src/Sulu/Bundle/PreviewBundle/Application/Manager/PreviewLinkManager.php do not enforce VIEW permission for the target resource in PreviewLinkManager::generate() or Prev…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T21:17:49.768Z. Updated 2026-09-02T17:38:08.912Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated03 Sep 2026, 00:38 WIB

Official record

MedPublished 01 Sep 2026, 04:15 WIB

CVE-2026-82921

ShopEx ECShop pack.php check_img_type unrestricted upload

A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function check_img_type of the file admin/pack.php. Executing a manipulation of the argument pack_img can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to the public and could b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T21:15:35.351Z. Updated 2026-09-01T16:00:44.279Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 23:00 WIB

Official record

MedPublished 01 Sep 2026, 04:00 WIB

CVE-2026-82919

cu silicon edit Endpoint views.py create_app missing authentication

A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function create_app of the file views.py of the component edit Endpoint. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and might be used. The ve…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T21:00:09.910Z. Updated 2026-08-31T21:57:43.457Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 04:57 WIB

Official record

MedPublished 01 Sep 2026, 03:58 WIB

CVE-2026-62993

Smarty: SSRF via redirect bypass of trusted_uri using {fetch}

Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 4.5.7 and 5.8.2, depending on the release line, Smarty's {fetch} handling in libs/plugins/function.fetch.php and src/FunctionHandler/Fetch.php used Security::isTrustedUri() to validate only the i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T20:58:03.616Z. Updated 2026-09-02T17:36:30.257Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated03 Sep 2026, 00:36 WIB

Official record

MedPublished 01 Sep 2026, 03:49 WIB

CVE-2026-75592

Kirby: Access to image files outside of the site root via path traversal in the media handling

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incomplete filesystem containment checks in src/Filesystem/Dir.php and src/Filesystem/F.php through Kirby\Filesystem\Dir::realpath() and Kirby\Filesystem\F::realpath(). The checks accep…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T20:49:41.341Z. Updated 2026-09-01T13:41:40.500Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 20:41 WIB

Official record

MedPublished 01 Sep 2026, 03:45 WIB

CVE-2026-82914

kishan0725 Hospital-Management-System search.php sql injection

A security flaw has been discovered in kishan0725 Hospital-Management-System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument Contact results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T20:45:36.090Z. Updated 2026-09-01T14:38:07.126Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:38 WIB

Official record

MedPublished 01 Sep 2026, 03:40 WIB

CVE-2026-81278

WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability

Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post SMTP: from 4.0.0 through beta.1.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T20:40:33.217Z. Updated 2026-09-01T14:58:13.959Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:58 WIB

Official record

MedPublished 01 Sep 2026, 03:30 WIB

CVE-2026-81778

WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T20:30:51.644Z. Updated 2026-09-01T13:51:57.100Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 20:51 WIB

Official record

MedPublished 01 Sep 2026, 03:30 WIB

CVE-2026-81762

WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability

Subscriber Broken Access Control in Booking and Rental Manager <= 2.7.6 versions.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T20:30:48.385Z. Updated 2026-09-01T13:53:06.585Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 20:53 WIB

Official record

MedPublished 01 Sep 2026, 03:30 WIB

CVE-2026-81758

WordPress OwnerRez API plugin <= 1.2.6 - Broken Access Control vulnerability

Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T20:30:47.725Z. Updated 2026-09-01T14:58:43.508Z.

CVSS6.3v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 21:58 WIB

Official record

MedPublished 01 Sep 2026, 03:30 WIB

CVE-2026-81280

WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders <= 4.0.0 versions.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T20:30:41.734Z. Updated 2026-09-01T15:15:40.199Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 22:15 WIB

Official record

MedPublished 01 Sep 2026, 03:30 WIB

CVE-2026-82852

WordPress MapSVG plugin <= 8.15.0 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery (SSRF) in MapSVG <= 8.15.0 versions.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T20:30:41.084Z. Updated 2026-09-02T14:13:37.274Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated02 Sep 2026, 21:13 WIB

Official record

MedPublished 01 Sep 2026, 03:30 WIB

CVE-2026-82909

QuantumNous new-api Revoked API Token token session expiration

A vulnerability was determined in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue is some unknown functionality of the file /api/usage/token/ of the component Revoked API Token Handler. Executing a manipulation can lead to session expiration. The attack may be performed from remote. The exploit has been p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-31T20:30:09.755Z. Updated 2026-09-02T14:12:21.151Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated02 Sep 2026, 21:12 WIB

Official record