Threat Feed
Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-21157 - Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activ
Source ↗
CVE-2026-21157 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T01:17
MEDIUM
CVE-2026-118590 - A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_
Source ↗
CVE-2026-118590 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T01:17
INFORMATIONAL
CVE-2026-113957 - An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content
Source ↗
CVE-2026-113957 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T01:17
MEDIUM
CVE-2026-118589 - A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/_vtk_42
Source ↗
CVE-2026-118589 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T00:17
MEDIUM
CVE-2026-118586 - A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the fi
Source ↗
CVE-2026-118586 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T00:17
LOW
CVE-2026-118585 - A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad
Source ↗
CVE-2026-118585 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T00:17
HIGH
CVE-2026-120194 - json-glib: json-glib: infinite loop in json_path_query() with negative JSONPath slice step
Source ↗
CVE-2026-120194 ·
Red Hat - CVE Feed · published 2026-10-29T00:00
· correlated from 2 sources
Red Hat
CRITICAL
CVE-2026-76418 - Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability (known exploited)
Source ↗
CVE-2026-76418 ·
CISA - Known Exploited Vulnerabilities · published 2026-10-29T00:00
· correlated from 2 sources
cisco
HIGH
CVE-2026-85749 - MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, in
Source ↗
CVE-2026-85749 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
MEDIUM
CVE-2026-82411 - Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2
Source ↗
CVE-2026-82411 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
INFORMATIONAL
CVE-2026-55561 - InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2-beta-
Source ↗
CVE-2026-55561 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
CRITICAL
CVE-2026-118579 - A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark
Source ↗
CVE-2026-118579 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
MEDIUM
CVE-2026-118578 - A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown
Source ↗
CVE-2026-118578 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
MEDIUM
CVE-2026-118577 - A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the c
Source ↗
CVE-2026-118577 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
f5
INFORMATIONAL
CVE-2026-111575 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Source ↗
CVE-2026-111575 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
INFORMATIONAL
CVE-2026-111486 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Source ↗
CVE-2026-111486 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
INFORMATIONAL
CVE-2026-111478 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Source ↗
CVE-2026-111478 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
HIGH
CVE-2026-86983 - swift-crypto: swift-crypto: Denial of Service via unbounded input to the P-384 VOPRF API
Source ↗
CVE-2026-86983 ·
Red Hat - CVE Feed · published 2026-10-28T23:01
· correlated from 2 sources
Red Hat
MEDIUM
GHSA-pq4g-8rxf-4g29 - Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass
Source ↗
CVE-2026-116695 ·
GitHub Security Advisories · published 2026-10-28T22:42
· correlated from 3 sources
crassRed Hat
MEDIUM
CVE-2026-75520 - domoticz: domoticz: Unauthorized script execution via missing permission checks
Source ↗
CVE-2026-75520 ·
Red Hat - CVE Feed · published 2026-10-28T22:30
· correlated from 2 sources
Red Hatlinux