Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-118586 - A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the fi
NEAR-REAL-TIME
CVE-2026-118586 · NIST NVD - National Vulnerability Database · published 2026-10-29T00:17
Source ↗
LOW
CVE-2026-118585 - A vulnerability was identified in configuroweb inventariobasico c9377cdba474deb3eb5a0704d197b5733af16b47/f9db0c0a04d79ad
NEAR-REAL-TIME
CVE-2026-118585 · NIST NVD - National Vulnerability Database · published 2026-10-29T00:17
Source ↗
HIGH
CVE-2026-120194 - json-glib: json-glib: infinite loop in json_path_query() with negative JSONPath slice step
NEAR-REAL-TIME
CVE-2026-120194 · Red Hat - CVE Feed · published 2026-10-29T00:00 · correlated from 2 sources
Red Hat
Source ↗
CRITICAL
CVE-2026-76418 - Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability (known exploited)
NEAR-REAL-TIME KEV ACTIVELY EXPLOITED
CVE-2026-76418 · CISA - Known Exploited Vulnerabilities · published 2026-10-29T00:00 · correlated from 2 sources
cisco
Source ↗
HIGH
CVE-2026-85749 - MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, in
NEAR-REAL-TIME
CVE-2026-85749 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
MEDIUM
CVE-2026-82411 - Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2
NEAR-REAL-TIME
CVE-2026-82411 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
INFORMATIONAL
CVE-2026-55561 - InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2-beta-
NEAR-REAL-TIME
CVE-2026-55561 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
CRITICAL
CVE-2026-118579 - A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark
NEAR-REAL-TIME
CVE-2026-118579 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
MEDIUM
CVE-2026-118578 - A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown
NEAR-REAL-TIME
CVE-2026-118578 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
MEDIUM
CVE-2026-118577 - A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the c
NEAR-REAL-TIME
CVE-2026-118577 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
f5
Source ↗
INFORMATIONAL
CVE-2026-111575 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-111575 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
INFORMATIONAL
CVE-2026-111486 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-111486 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
INFORMATIONAL
CVE-2026-111478 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-111478 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
HIGH
CVE-2026-86983 - swift-crypto: swift-crypto: Denial of Service via unbounded input to the P-384 VOPRF API
NEAR-REAL-TIME
CVE-2026-86983 · Red Hat - CVE Feed · published 2026-10-28T23:01 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
GHSA-pq4g-8rxf-4g29 - Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass
NEAR-REAL-TIME
CVE-2026-116695 · GitHub Security Advisories · published 2026-10-28T22:42 · correlated from 3 sources
crassRed Hat
Source ↗
MEDIUM
CVE-2026-75520 - domoticz: domoticz: Unauthorized script execution via missing permission checks
NEAR-REAL-TIME
CVE-2026-75520 · Red Hat - CVE Feed · published 2026-10-28T22:30 · correlated from 2 sources
Red Hatlinux
Source ↗
HIGH
CVE-2026-93851 - Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to validate the target post ID in the Age
NEAR-REAL-TIME
CVE-2026-93851 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-61575 - AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` uses `pathinfo` on the caller-controlled `fileURI`
NEAR-REAL-TIME
CVE-2026-61575 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-61573 - AVideo is a video-sharing Platform. Prior to 8.1.0, the anonymous login interface reflects request values into HTML and
NEAR-REAL-TIME
CVE-2026-61573 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-61572 - AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_contents` in `objects/func
NEAR-REAL-TIME
CVE-2026-61572 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗