Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-113692 - Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and
NEAR-REAL-TIME
CVE-2026-113692 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
INFORMATIONAL
CVE-2026-113691 - Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01
NEAR-REAL-TIME
CVE-2026-113691 · NIST NVD - National Vulnerability Database · published 2026-10-29T14:17
Source ↗
MEDIUM
CVE-2026-56056 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid The
NEAR-REAL-TIME
CVE-2026-56056 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-52709 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Video Gal
NEAR-REAL-TIME
CVE-2026-52709 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
HIGH
CVE-2026-49142 - OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that all
NEAR-REAL-TIME
CVE-2026-49142 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-48196 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaliforms Kali For
NEAR-REAL-TIME
CVE-2026-48196 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-42703 - Missing Authorization vulnerability in Kaliforms Kali Forms kali-forms allows Exploiting Incorrectly Configured Access C
NEAR-REAL-TIME
CVE-2026-42703 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-39741 - Missing Authorization vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Exploiting
NEAR-REAL-TIME
CVE-2026-39741 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-39735 - Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access C
NEAR-REAL-TIME
CVE-2026-39735 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-24533 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Bl
NEAR-REAL-TIME
CVE-2026-24533 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-22386 - Missing Authorization vulnerability in Ahmad WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access
NEAR-REAL-TIME
CVE-2026-22386 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-118094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser
NEAR-REAL-TIME
CVE-2026-118094 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-118093 - Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed allows Exploiting Incor
NEAR-REAL-TIME
CVE-2026-118093 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
MEDIUM
CVE-2026-118087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site R
NEAR-REAL-TIME
CVE-2026-118087 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
INFORMATIONAL
CVE-2026-113690 - Stored cross-site scripting in the SmartIT attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.
NEAR-REAL-TIME
CVE-2026-113690 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
INFORMATIONAL
CVE-2026-113689 - Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.
NEAR-REAL-TIME
CVE-2026-113689 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
INFORMATIONAL
CVE-2026-113688 - Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management Suite versions 25.3
NEAR-REAL-TIME
CVE-2026-113688 · NIST NVD - National Vulnerability Database · published 2026-10-29T13:17
Source ↗
HIGH
CVE-2019-25781 - markdown: python-markdown: Denial of Service via inefficient inline link parsing
NEAR-REAL-TIME
CVE-2019-25781 · Red Hat - CVE Feed · published 2026-10-29T13:08 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-79656 - grafana: OAuth and OIDC tokens written unredacted to Grafana server logs
NEAR-REAL-TIME
CVE-2026-79656 · Red Hat - CVE Feed · published 2026-10-29T13:02 · correlated from 2 sources
Red Hatgoogle
Source ↗
MEDIUM
CVE-2026-97860 - YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who h
NEAR-REAL-TIME
CVE-2026-97860 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗