Evan

9 credited records · 9 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-104084No exploit	SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Tokensmartertools · smartermail · CWE-613	High8.7	—	0.3%	4 days ago
21Monitor	CVE-2026-104083No exploit	SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Contentsmartertools · smartermail · CWE-79 Pre-auth XSS	Medium5.3	—	0.3%	4 days ago
34Monitor	CVE-2026-104082Proof of concept	SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mountsmartertools · smartermail · CWE-94 RCE	High8.6	—	0.6%	4 days ago
34Monitor	CVE-2026-67615No exploit	openEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invokerapereo foundation · openequella · CWE-184 RCE Deserialization	High8.7	—	0.5%	Sep 22, 2026
34Monitor	CVE-2026-94109No exploit	openEQUELLA < 2026.1.0 Authenticated Stored SSTI via FreemarkerPortletRendereropenequella · openequella · CWE-1336 RCE SSTI	High8.6	—	0.8%	Sep 20, 2026
21Monitor	CVE-2026-11984No exploit	Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameterspacetime · ad inserter – ad manager & adsense ads · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.3%	Sep 16, 2026
20Monitor	CVE-2026-65053No exploit	Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Namehorde · imp · CWE-79 Pre-auth XSS	Medium5.1	—	0.4%	Aug 24, 2026
28Monitor	CVE-2026-58451No exploit	Horde IMP < 7.0.1 Path Traversal via Compose.php img srchorde · imp · CWE-22 Path traversal CSRF	High7.1	—	0.6%	Jul 1, 2026
35Monitor	CVE-2026-25857Proof of concept	Tenda G300-F Command Injection via formSetWanDiagtenda · g300-f firmware · CWE-78 RCE Command injection	High8.6	—	3.2%	Feb 7, 2026

CVE-2026-104084
34Monitor
SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token
HighCVSS 8.7No exploitEPSS 0%
smartertools · smartermail4 days ago
CVE-2026-104083
21Monitor
SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- XSS
smartertools · smartermail4 days ago
CVE-2026-104082
34Monitor
SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount
HighCVSS 8.6Proof of conceptEPSS 1%
- RCE
smartertools · smartermail4 days ago
CVE-2026-67615
34Monitor
openEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invoker
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Deserialization
apereo foundation · openequellaSep 22, 2026
CVE-2026-94109
34Monitor
openEQUELLA < 2026.1.0 Authenticated Stored SSTI via FreemarkerPortletRenderer
HighCVSS 8.6No exploitEPSS 1%
- RCE
- SSTI
openequella · openequellaSep 20, 2026
CVE-2026-11984
21Monitor
Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
spacetime · ad inserter – ad manager & adsense adsSep 16, 2026
CVE-2026-65053
20Monitor
Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name
MediumCVSS 5.1No exploitEPSS 0%
- Pre-auth
- XSS
horde · impAug 24, 2026
CVE-2026-58451
28Monitor
Horde IMP < 7.0.1 Path Traversal via Compose.php img src
HighCVSS 7.1No exploitEPSS 1%
- Path traversal
- CSRF
horde · impJul 1, 2026
CVE-2026-25857
35Monitor
Tenda G300-F Command Injection via formSetWanDiag
HighCVSS 8.6Proof of conceptEPSS 3%
- RCE
- Command injection
tenda · g300-f firmwareFeb 7, 2026