Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-93855 - The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' paramete
NEAR-REAL-TIME
CVE-2026-93855 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpress
Source ↗
HIGH
CVE-2026-93757 - The Wild Apricot Login plugin for WordPress is vulnerable to Authentication Bypass via SSO Email-Collision Account Bindi
NEAR-REAL-TIME
CVE-2026-93757 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpress
Source ↗
MEDIUM
CVE-2026-42949 - A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A spec
NEAR-REAL-TIME
CVE-2026-42949 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
Source ↗
CRITICAL
CVE-2026-42922 - A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially
NEAR-REAL-TIME
CVE-2026-42922 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
Source ↗
MEDIUM
CVE-2026-40063 - A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809
NEAR-REAL-TIME
CVE-2026-40063 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
Source ↗
INFORMATIONAL
CVE-2026-118426 - In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call
NEAR-REAL-TIME
CVE-2026-118426 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
Source ↗
CRITICAL
CVE-2026-109516 - The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeo
NEAR-REAL-TIME
CVE-2026-109516 · NIST NVD - National Vulnerability Database · published 2026-10-29T04:18
wordpress
Source ↗
INFORMATIONAL
CVE-2026-66092 - In openEQUELLA before 2026.2, the pre-login notice is stored as HTML and rendered on the legacy logon page without encod
NEAR-REAL-TIME
CVE-2026-66092 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
INFORMATIONAL
CVE-2026-66091 - In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authentication or authorisation
NEAR-REAL-TIME
CVE-2026-66091 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
INFORMATIONAL
CVE-2026-66090 - In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user
NEAR-REAL-TIME
CVE-2026-66090 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
INFORMATIONAL
CVE-2026-66089 - In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves ext
NEAR-REAL-TIME
CVE-2026-66089 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
INFORMATIONAL
CVE-2026-66088 - In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating sy
NEAR-REAL-TIME
CVE-2026-66088 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
INFORMATIONAL
CVE-2026-16889 - In openEQUELLA before 2026.1, the pre-login notice image upload endpoint (PUT /api/preloginnotice/image/{name}) does not
NEAR-REAL-TIME
CVE-2026-16889 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
Source ↗
MEDIUM
CVE-2026-114173 - The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefron
NEAR-REAL-TIME
CVE-2026-114173 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
wordpress
Source ↗
MEDIUM
CVE-2026-113409 - The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to store
NEAR-REAL-TIME
CVE-2026-113409 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
wordpress
Source ↗
HIGH
CVE-2026-113387 - The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secre
NEAR-REAL-TIME
CVE-2026-113387 · NIST NVD - National Vulnerability Database · published 2026-10-29T02:16
wordpress
Source ↗
INFORMATIONAL
CVE-2026-21157 - Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activ
NEAR-REAL-TIME
CVE-2026-21157 · NIST NVD - National Vulnerability Database · published 2026-10-29T01:17
Source ↗
MEDIUM
CVE-2026-118590 - A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_
NEAR-REAL-TIME
CVE-2026-118590 · NIST NVD - National Vulnerability Database · published 2026-10-29T01:17
Source ↗
INFORMATIONAL
CVE-2026-113957 - An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content
NEAR-REAL-TIME
CVE-2026-113957 · NIST NVD - National Vulnerability Database · published 2026-10-29T01:17
Source ↗
MEDIUM
CVE-2026-118589 - A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/_vtk_42
NEAR-REAL-TIME
CVE-2026-118589 · NIST NVD - National Vulnerability Database · published 2026-10-29T00:17
Source ↗