Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
CRITICAL
CVE-2026-97854 - Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitra
NEAR-REAL-TIME
CVE-2026-97854 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
HIGH
CVE-2026-96767 - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi
NEAR-REAL-TIME
CVE-2026-96767 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
wordpress
Source ↗
MEDIUM
CVE-2026-92086 - The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including
NEAR-REAL-TIME
CVE-2026-92086 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
wordpress
Source ↗
INFORMATIONAL
CVE-2026-5702 - Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticat
NEAR-REAL-TIME
CVE-2026-5702 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
INFORMATIONAL
CVE-2026-5700 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code
NEAR-REAL-TIME
CVE-2026-5700 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
INFORMATIONAL
CVE-2026-5699 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code
NEAR-REAL-TIME
CVE-2026-5699 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
INFORMATIONAL
CVE-2026-5698 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code
NEAR-REAL-TIME
CVE-2026-5698 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
INFORMATIONAL
CVE-2026-5697 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code
NEAR-REAL-TIME
CVE-2026-5697 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
MEDIUM
CVE-2026-27401 - Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-fo
NEAR-REAL-TIME
CVE-2026-27401 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
HIGH
CVE-2026-119028 - oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by suppl
NEAR-REAL-TIME
CVE-2026-119028 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
HIGH
CVE-2026-119027 - oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by suppl
NEAR-REAL-TIME
CVE-2026-119027 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
HIGH
CVE-2026-119025 - open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code
NEAR-REAL-TIME
CVE-2026-119025 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
HIGH
CVE-2026-115821 - The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_first_name, billing_la
NEAR-REAL-TIME
CVE-2026-115821 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
wordpress
Source ↗
HIGH
CVE-2026-110184 - The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, a
NEAR-REAL-TIME
CVE-2026-110184 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
wordpress
Source ↗
MEDIUM
CVE-2026-109822 - Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive in
NEAR-REAL-TIME
CVE-2026-109822 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
MEDIUM
CVE-2026-109216 - The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th
NEAR-REAL-TIME
CVE-2026-109216 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
wordpress
Source ↗
HIGH
CVE-2026-103665 - The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Librari
NEAR-REAL-TIME
CVE-2026-103665 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
MEDIUM
CVE-2026-91920 - undertow: undertow: ChunkReader message length permits chunk-size overflow
NEAR-REAL-TIME
CVE-2026-91920 · Red Hat - CVE Feed · published 2026-10-29T12:11 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-71569 - Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from
NEAR-REAL-TIME
CVE-2026-71569 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
apachegoogle
Source ↗
HIGH
CVE-2026-33924 - Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient va
NEAR-REAL-TIME
CVE-2026-33924 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗