Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
GHSA-44qr-rrjg-2cqq - ApostropheCMS: CAPTCHA response token not URL-encoded
NEAR-REAL-TIME
CVE-2026-113667 · GitHub Security Advisories · published 2026-10-20T18:05
@apostrophecms
Source ↗
MEDIUM
GHSA-2jrp-qc93-h2j8 - ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization
NEAR-REAL-TIME
CVE-2026-113655 · GitHub Security Advisories · published 2026-10-20T18:04
apostrophe
Source ↗
HIGH
GHSA-j5rq-xfvr-p969 - ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service
NEAR-REAL-TIME
CVE-2026-113666 · GitHub Security Advisories · published 2026-10-20T18:03
@apostrophecmsapostrophe
Source ↗
MEDIUM
GHSA-x3q4-9hxx-gx8m - ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content render
NEAR-REAL-TIME
CVE-2026-113654 · GitHub Security Advisories · published 2026-10-20T18:03 · correlated from 2 sources
sanitize-htmlRed Hat
Source ↗
HIGH
GHSA-q3jh-wrc6-jgq8 - follow-redirects array-form headers bypass cross-origin credential stripping
NEAR-REAL-TIME
CVE-2026-111756 · GitHub Security Advisories · published 2026-10-20T17:58 · correlated from 2 sources
follow-redirectsRed Hat
Source ↗
HIGH
GHSA-57xq-rjx2-v5xh - @angular/router: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)
NEAR-REAL-TIME
CVE-2026-111751 · GitHub Security Advisories · published 2026-10-20T17:52
@angular
Source ↗
MEDIUM
CVE-2026-92539 - grafana: Grafana: Unauthorized cross-organization user management via the SCIM API
NEAR-REAL-TIME
CVE-2026-92539 · Red Hat - CVE Feed · published 2026-10-20T16:55
Red Hat
Source ↗
CRITICAL
WAGO OS Linux
NEAR-REAL-TIME
CVE-2026-80466 · CISA - Cybersecurity Advisories · published 2026-10-20T16:25
Source ↗
CRITICAL
HMS Networks PEAK-System PCAN Windows drivers
NEAR-REAL-TIME
CVE-2026-109576 · CISA - Cybersecurity Advisories · published 2026-10-20T16:25
Source ↗
MEDIUM
CVE-2026-113650 - sanitize-html: sanitize-html: Denial of Service via unbounded recursion in iframe tag processing
NEAR-REAL-TIME
CVE-2026-113650 · Red Hat - CVE Feed · published 2026-10-20T16:19 · correlated from 2 sources
Red Hatsanitize-html
Source ↗
INFORMATIONAL
CVE-2026-92843 - A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger
NEAR-REAL-TIME
CVE-2026-92843 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
INFORMATIONAL
CVE-2026-91057 - `_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the stri
NEAR-REAL-TIME
CVE-2026-91057 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
INFORMATIONAL
CVE-2026-90800 - Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the
NEAR-REAL-TIME
CVE-2026-90800 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
apache
Source ↗
INFORMATIONAL
CVE-2026-90799 - Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user
NEAR-REAL-TIME
CVE-2026-90799 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
apache
Source ↗
INFORMATIONAL
CVE-2026-90798 - A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a rep
NEAR-REAL-TIME
CVE-2026-90798 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
apache
Source ↗
INFORMATIONAL
CVE-2026-90797 - An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote c
NEAR-REAL-TIME
CVE-2026-90797 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
apache
Source ↗
INFORMATIONAL
CVE-2026-86471 - An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server ad
NEAR-REAL-TIME
CVE-2026-86471 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
apache
Source ↗
CRITICAL
CVE-2026-113703 - SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where en
NEAR-REAL-TIME
CVE-2026-113703 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
MEDIUM
CVE-2026-113683 - VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allow
NEAR-REAL-TIME
CVE-2026-113683 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
HIGH
CVE-2026-113682 - Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allo
NEAR-REAL-TIME
CVE-2026-113682 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗