Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-93851 - Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to validate the target post ID in the Age
NEAR-REAL-TIME
CVE-2026-93851 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-61575 - AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` uses `pathinfo` on the caller-controlled `fileURI`
NEAR-REAL-TIME
CVE-2026-61575 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-61573 - AVideo is a video-sharing Platform. Prior to 8.1.0, the anonymous login interface reflects request values into HTML and
NEAR-REAL-TIME
CVE-2026-61573 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-61572 - AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_contents` in `objects/func
NEAR-REAL-TIME
CVE-2026-61572 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-61571 - AVideo is a video-sharing Platform. Prior to 8.1.0, the encoder lacks a global authentication layer and exposes control
NEAR-REAL-TIME
CVE-2026-61571 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-61569 - AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer login at `objects/login.json.php` passe
NEAR-REAL-TIME
CVE-2026-61569 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
CRITICAL
CVE-2026-61567 - AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an a
NEAR-REAL-TIME
CVE-2026-61567 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
CRITICAL
CVE-2026-61564 - AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.p
NEAR-REAL-TIME
CVE-2026-61564 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
INFORMATIONAL
CVE-2026-61546 - AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard appli
NEAR-REAL-TIME
CVE-2026-61546 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
INFORMATIONAL
CVE-2026-57448 - Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the adm
NEAR-REAL-TIME
CVE-2026-57448 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-54455 - OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t
NEAR-REAL-TIME
CVE-2026-54455 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-54453 - OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t
NEAR-REAL-TIME
CVE-2026-54453 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-118804 - Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to
NEAR-REAL-TIME
CVE-2026-118804 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
wordpress
Source ↗
HIGH
CVE-2026-118803 - Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous
NEAR-REAL-TIME
CVE-2026-118803 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-118757 - PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization vulnerab
NEAR-REAL-TIME
CVE-2026-118757 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-118756 - gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to
NEAR-REAL-TIME
CVE-2026-118756 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-118755 - Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticate
NEAR-REAL-TIME
CVE-2026-118755 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-118754 - Dolibarr ERP CRM before 24.0.2 contains a missing authorization vulnerability in htdocs/public/recruitment/view.php that
NEAR-REAL-TIME
CVE-2026-118754 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-118753 - FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attac
NEAR-REAL-TIME
CVE-2026-118753 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-118693 - CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trus
NEAR-REAL-TIME
CVE-2026-118693 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗