Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
GHSA-4mfg-r38w-w8fg - mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-28T19:51
mcp-sanitizer
Source ↗
HIGH
GHSA-7w82-6f9j-v9jp - mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-28T19:51
mcp-sanitizer
Source ↗
HIGH
GHSA-5j9r-fx4x-rpvg - rucio has an Authorization Bypass on REST API endpoint for signing URLs
NEAR-REAL-TIME
CVE-2026-58273 · GitHub Security Advisories · published 2026-10-28T19:50
rucio
Source ↗
MEDIUM
GHSA-473q-m89c-ghf8 - MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-28T19:49
MySqlConnector
Source ↗
LOW
GHSA-8qx7-j2v2-x6q5 - Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
NEAR-REAL-TIME
CVE-2026-55458 · GitHub Security Advisories · published 2026-10-28T19:49
github
Source ↗
HIGH
CVE-2026-118688 - wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to
NEAR-REAL-TIME
CVE-2026-118688 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
MEDIUM
CVE-2026-118687 - Coder before 2.29.21, 2.30.0 before 2.34.12, 2.35.0 before 2.35.9, 2.36.0 before 2.36.7, and 2.37.0 before 2.37.4 does n
NEAR-REAL-TIME
CVE-2026-118687 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
google
Source ↗
HIGH
CVE-2026-118686 - EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the password-redaction
NEAR-REAL-TIME
CVE-2026-118686 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
MEDIUM
CVE-2026-118685 - ToolJet from 3.20.2-lts before 3.20.242-lts contains an authorization bypass in SignupDisableGuard, which treats the str
NEAR-REAL-TIME
CVE-2026-118685 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
MEDIUM
CVE-2026-118684 - MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns T
NEAR-REAL-TIME
CVE-2026-118684 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118683 - MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a
NEAR-REAL-TIME
CVE-2026-118683 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
MEDIUM
CVE-2026-118680 - SiYuan 3.8.7 through 3.8.8 fails to normalize Windows GLOBALROOT device-namespace aliases, bypassing the IsSensitivePath
NEAR-REAL-TIME
CVE-2026-118680 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118679 - n8n before 1.123.83, 2.41.4, and 2.42.1 contains a server-side request forgery vulnerability in the Slack Trigger webhoo
NEAR-REAL-TIME
CVE-2026-118679 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118678 - n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability that allows low-privileged users
NEAR-REAL-TIME
CVE-2026-118678 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
MEDIUM
CVE-2026-118677 - n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop ap
NEAR-REAL-TIME
CVE-2026-118677 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118676 - n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows member users to use c
NEAR-REAL-TIME
CVE-2026-118676 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118675 - n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared w
NEAR-REAL-TIME
CVE-2026-118675 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118649 - n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and caches each workflow's owner projec
NEAR-REAL-TIME
CVE-2026-118649 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118648 - n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site scripting vulnerability be
NEAR-REAL-TIME
CVE-2026-118648 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118647 - n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error ex
NEAR-REAL-TIME
CVE-2026-118647 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗