Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-5698 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code
NEAR-REAL-TIME
CVE-2026-5698 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
INFORMATIONAL
CVE-2026-5697 - Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code
NEAR-REAL-TIME
CVE-2026-5697 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
MEDIUM
CVE-2026-27401 - Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-fo
NEAR-REAL-TIME
CVE-2026-27401 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
HIGH
CVE-2026-119028 - oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by suppl
NEAR-REAL-TIME
CVE-2026-119028 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
HIGH
CVE-2026-119027 - oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by suppl
NEAR-REAL-TIME
CVE-2026-119027 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
HIGH
CVE-2026-119025 - open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code
NEAR-REAL-TIME
CVE-2026-119025 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
HIGH
CVE-2026-115821 - The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_first_name, billing_la
NEAR-REAL-TIME
CVE-2026-115821 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
wordpress
Source ↗
HIGH
CVE-2026-110184 - The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the 'slug' parameter in all versions up to, a
NEAR-REAL-TIME
CVE-2026-110184 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
wordpress
Source ↗
MEDIUM
CVE-2026-109822 - Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure storage of sensitive in
NEAR-REAL-TIME
CVE-2026-109822 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
MEDIUM
CVE-2026-109216 - The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th
NEAR-REAL-TIME
CVE-2026-109216 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
wordpress
Source ↗
HIGH
CVE-2026-103665 - The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Librari
NEAR-REAL-TIME
CVE-2026-103665 · NIST NVD - National Vulnerability Database · published 2026-10-29T12:17
Source ↗
MEDIUM
CVE-2026-91920 - undertow: undertow: ChunkReader message length permits chunk-size overflow
NEAR-REAL-TIME
CVE-2026-91920 · Red Hat - CVE Feed · published 2026-10-29T12:11 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-71569 - Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from
NEAR-REAL-TIME
CVE-2026-71569 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
apachegoogle
Source ↗
HIGH
CVE-2026-33924 - Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient va
NEAR-REAL-TIME
CVE-2026-33924 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
HIGH
CVE-2026-33923 - A signature verification vulnerability was discovered in the update installation functionality due to inconsistent valid
NEAR-REAL-TIME
CVE-2026-33923 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
MEDIUM
CVE-2026-118989 - WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability
NEAR-REAL-TIME
CVE-2026-118989 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
MEDIUM
CVE-2026-118984 - OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or adm
NEAR-REAL-TIME
CVE-2026-118984 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
HIGH
CVE-2026-116409 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell O
NEAR-REAL-TIME
CVE-2026-116409 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
HIGH
CVE-2026-115967 - Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication
NEAR-REAL-TIME
CVE-2026-115967 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗
HIGH
CVE-2026-115965 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPr
NEAR-REAL-TIME
CVE-2026-115965 · NIST NVD - National Vulnerability Database · published 2026-10-29T11:17
Source ↗