Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
CRITICAL
CVE-2026-118579 - A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark
NEAR-REAL-TIME
CVE-2026-118579 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
MEDIUM
CVE-2026-118578 - A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown
NEAR-REAL-TIME
CVE-2026-118578 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
MEDIUM
CVE-2026-118577 - A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the c
NEAR-REAL-TIME
CVE-2026-118577 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
f5
Source ↗
INFORMATIONAL
CVE-2026-111575 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-111575 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
INFORMATIONAL
CVE-2026-111486 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-111486 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
INFORMATIONAL
CVE-2026-111478 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-111478 · NIST NVD - National Vulnerability Database · published 2026-10-28T23:17
Source ↗
HIGH
CVE-2026-86983 - swift-crypto: swift-crypto: Denial of Service via unbounded input to the P-384 VOPRF API
NEAR-REAL-TIME
CVE-2026-86983 · Red Hat - CVE Feed · published 2026-10-28T23:01 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
GHSA-pq4g-8rxf-4g29 - Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass
NEAR-REAL-TIME
CVE-2026-116695 · GitHub Security Advisories · published 2026-10-28T22:42 · correlated from 3 sources
crassRed Hat
Source ↗
MEDIUM
CVE-2026-75520 - domoticz: domoticz: Unauthorized script execution via missing permission checks
NEAR-REAL-TIME
CVE-2026-75520 · Red Hat - CVE Feed · published 2026-10-28T22:30 · correlated from 2 sources
Red Hatlinux
Source ↗
HIGH
CVE-2026-93851 - Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to validate the target post ID in the Age
NEAR-REAL-TIME
CVE-2026-93851 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-61575 - AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` uses `pathinfo` on the caller-controlled `fileURI`
NEAR-REAL-TIME
CVE-2026-61575 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-61573 - AVideo is a video-sharing Platform. Prior to 8.1.0, the anonymous login interface reflects request values into HTML and
NEAR-REAL-TIME
CVE-2026-61573 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-61572 - AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_contents` in `objects/func
NEAR-REAL-TIME
CVE-2026-61572 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-61571 - AVideo is a video-sharing Platform. Prior to 8.1.0, the encoder lacks a global authentication layer and exposes control
NEAR-REAL-TIME
CVE-2026-61571 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-61569 - AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer login at `objects/login.json.php` passe
NEAR-REAL-TIME
CVE-2026-61569 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
CRITICAL
CVE-2026-61567 - AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an a
NEAR-REAL-TIME
CVE-2026-61567 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
CRITICAL
CVE-2026-61564 - AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/checkConfiguration.p
NEAR-REAL-TIME
CVE-2026-61564 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
INFORMATIONAL
CVE-2026-61546 - AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard appli
NEAR-REAL-TIME
CVE-2026-61546 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
INFORMATIONAL
CVE-2026-57448 - Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the adm
NEAR-REAL-TIME
CVE-2026-57448 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-54455 - OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t
NEAR-REAL-TIME
CVE-2026-54455 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗