Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-114358 - This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the
NEAR-REAL-TIME
CVE-2026-114358 · NIST NVD - National Vulnerability Database · published 2026-10-29T09:17
Source ↗
INFORMATIONAL
CVE-2026-117174 - Rejected reason: VUL-2026-008368 為先回報之相同問題
NEAR-REAL-TIME
CVE-2026-117174 · NIST NVD - National Vulnerability Database · published 2026-10-29T08:17
Source ↗
INFORMATIONAL
CVE-2025-62841 - An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Bac
NEAR-REAL-TIME
CVE-2025-62841 · NIST NVD - National Vulnerability Database · published 2026-10-29T08:17
Source ↗
INFORMATIONAL
CVE-2025-62839 - An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Bac
NEAR-REAL-TIME
CVE-2025-62839 · NIST NVD - National Vulnerability Database · published 2026-10-29T08:16
Source ↗
HIGH
CVE-2026-103963 - glib-networking: Unbounded TLS 1.3 session ticket queue growth in glib-networking allows remote denial of service
NEAR-REAL-TIME
CVE-2026-103963 · Red Hat - CVE Feed · published 2026-10-29T08:06 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-118030 - A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and ac
NEAR-REAL-TIME
CVE-2026-118030 · NIST NVD - National Vulnerability Database · published 2026-10-29T07:16
Source ↗
MEDIUM
CVE-2026-117859 - A flaw was found in the Pushed Authorization Request PAR implementation of the keycloak-services component. The issue oc
NEAR-REAL-TIME
CVE-2026-117859 · NIST NVD - National Vulnerability Database · published 2026-10-29T07:16
Source ↗
MEDIUM
CVE-2026-93293 - The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bundled Freemius SDK's
NEAR-REAL-TIME
CVE-2026-93293 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
HIGH
CVE-2026-89216 - The vTables WordPress plugin before 0.3 does not properly sanitise and escape a parameter before using it in a SQL stat
NEAR-REAL-TIME
CVE-2026-89216 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-88928 - The PAYCOMET for WooCommerce WordPress plugin before 5.46 does not verify the cryptographic signature on its payment not
NEAR-REAL-TIME
CVE-2026-88928 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
HIGH
CVE-2026-86794 - The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks when processing public ev
NEAR-REAL-TIME
CVE-2026-86794 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
LOW
CVE-2026-85007 - The Video Player for YouTube WordPress plugin before 2.1.4 does not perform a capability check on its player-preset AJA
NEAR-REAL-TIME
CVE-2026-85007 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-78396 - The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose
NEAR-REAL-TIME
CVE-2026-78396 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-78395 - The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when proc
NEAR-REAL-TIME
CVE-2026-78395 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
HIGH
CVE-2026-118905 - Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.31.
NEAR-REAL-TIME
CVE-2026-118905 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
Source ↗
MEDIUM
CVE-2026-115302 - The Contact Form by Supsystic WordPress plugin before 1.11.1 does not restrict access to an AJAX action that deletes st
NEAR-REAL-TIME
CVE-2026-115302 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
HIGH
CVE-2026-115301 - The Contact Form by Supsystic WordPress plugin before 1.11.1 does not sandbox the template engine used to render its fo
NEAR-REAL-TIME
CVE-2026-115301 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-115300 - The Contact Form by Supsystic WordPress plugin before 1.11.1 does not validate a CSRF token or request origin on two ad
NEAR-REAL-TIME
CVE-2026-115300 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-115299 - The Contact Form by Supsystic WordPress plugin before 1.11.1 does not verify a CSRF nonce before saving its mail settin
NEAR-REAL-TIME
CVE-2026-115299 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗
MEDIUM
CVE-2026-115282 - The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not perform an authorization check before rendering posts
NEAR-REAL-TIME
CVE-2026-115282 · NIST NVD - National Vulnerability Database · published 2026-10-29T06:17
wordpress
Source ↗