Kevoreilly vulnerabilities
We track 1 vulnerability in Kevoreilly products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Kevoreilly vulnerabilities
- 8.1 High severity
CAPEv2: Missing Authorization
CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analyses submitted by other users. Attackers can enumerate all tasks in the system and delete arbitrary analyses by sending re