Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-54453 - OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t
NEAR-REAL-TIME
CVE-2026-54453 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-118804 - Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to
NEAR-REAL-TIME
CVE-2026-118804 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
wordpress
Source ↗
HIGH
CVE-2026-118803 - Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous
NEAR-REAL-TIME
CVE-2026-118803 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-118757 - PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization vulnerab
NEAR-REAL-TIME
CVE-2026-118757 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-118756 - gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to
NEAR-REAL-TIME
CVE-2026-118756 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-118755 - Volmarg Personal Management System through 2.1.0 contains an OS command injection vulnerability that allows authenticate
NEAR-REAL-TIME
CVE-2026-118755 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-118754 - Dolibarr ERP CRM before 24.0.2 contains a missing authorization vulnerability in htdocs/public/recruitment/view.php that
NEAR-REAL-TIME
CVE-2026-118754 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-118753 - FreeImage (danoli3 fork) before 3.19.25 contains a heap buffer overflow vulnerability in PluginGIF.cpp that allows attac
NEAR-REAL-TIME
CVE-2026-118753 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-118693 - CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trus
NEAR-REAL-TIME
CVE-2026-118693 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-118692 - CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked that allows attackers
NEAR-REAL-TIME
CVE-2026-118692 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
LOW
CVE-2026-118691 - xianyu-auto-reply-fix through 2.0.7 contains a missing authorization vulnerability in the POST /send-message endpoint th
NEAR-REAL-TIME
CVE-2026-118691 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
CRITICAL
CVE-2026-118690 - Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote attacke
NEAR-REAL-TIME
CVE-2026-118690 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-118689 - OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() that allows unauthe
NEAR-REAL-TIME
CVE-2026-118689 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
HIGH
CVE-2026-118682 - KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing att
NEAR-REAL-TIME
CVE-2026-118682 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-118538 - A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTr
NEAR-REAL-TIME
CVE-2026-118538 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-118537 - A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catal
NEAR-REAL-TIME
CVE-2026-118537 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
MEDIUM
CVE-2026-116641 - The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. Howe
NEAR-REAL-TIME
CVE-2026-116641 · NIST NVD - National Vulnerability Database · published 2026-10-28T22:17
Source ↗
CRITICAL
GHSA-6jp4-8v48-cc5v - Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it
NEAR-REAL-TIME
CVE-2026-117601 · GitHub Security Advisories · published 2026-10-28T21:23 · correlated from 2 sources
electrum
Source ↗
MEDIUM
GHSA-2hw4-c9m4-f2fj - knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-28T21:20
knative
Source ↗
MEDIUM
GHSA-jf75-q64q-g65r - Waline login accepts a non-string email as a match-all MongoDB query
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-28T21:17
@waline
Source ↗