Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-114706 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Te
NEAR-REAL-TIME
CVE-2026-114706 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-114181 - Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager al
NEAR-REAL-TIME
CVE-2026-114181 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-110881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S
NEAR-REAL-TIME
CVE-2026-110881 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
INFORMATIONAL
CVE-2026-107024 - Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite anot
NEAR-REAL-TIME
CVE-2026-107024 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
MEDIUM
CVE-2026-107023 - Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrari
NEAR-REAL-TIME
CVE-2026-107023 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
INFORMATIONAL
CVE-2026-107021 - Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows u
NEAR-REAL-TIME
CVE-2026-107021 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
HIGH
CVE-2026-107020 - An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers
NEAR-REAL-TIME
CVE-2026-107020 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
INFORMATIONAL
CVE-2026-107019 - Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthori
NEAR-REAL-TIME
CVE-2026-107019 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
INFORMATIONAL
CVE-2026-107018 - Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read a
NEAR-REAL-TIME
CVE-2026-107018 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
CRITICAL
CVE-2026-107017 - Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers t
NEAR-REAL-TIME
CVE-2026-107017 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
INFORMATIONAL
CVE-2026-107016 - Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.
NEAR-REAL-TIME
CVE-2026-107016 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
CRITICAL
CVE-2026-107015 - Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in anot
NEAR-REAL-TIME
CVE-2026-107015 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
INFORMATIONAL
CVE-2026-107014 - Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read no
NEAR-REAL-TIME
CVE-2026-107014 · NIST NVD - National Vulnerability Database · published 2026-10-29T15:17
Source ↗
CRITICAL
Hitachi Energy TRO600 series products
NEAR-REAL-TIME
CVE-2026-10756 · CISA - Cybersecurity Advisories · published 2026-10-29T15:01 · correlated from 2 sources
Source ↗
CRITICAL
Hitachi Energy CoreTec Product
NEAR-REAL-TIME
CVE-2026-13162 · CISA - Cybersecurity Advisories · published 2026-10-29T15:01 · correlated from 2 sources
Source ↗
HIGH
CVE-2026-115642 - keystonemiddleware: keystonemiddleware: application credential access_rules bypass via X-Service-Token header presence c
NEAR-REAL-TIME
CVE-2026-115642 · Red Hat - CVE Feed · published 2026-10-29T15:00 · correlated from 2 sources
Red Hat
Source ↗
INFORMATIONAL
CVE-2026-79589 - The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker
NEAR-REAL-TIME
CVE-2026-79589 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-54862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codection Import a
NEAR-REAL-TIME
CVE-2026-54862 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-48202 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-b
NEAR-REAL-TIME
CVE-2026-48202 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-48195 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poste
NEAR-REAL-TIME
CVE-2026-48195 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗