Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-118510 - A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the ab
NEAR-REAL-TIME
CVE-2026-118510 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117626 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the fil
NEAR-REAL-TIME
CVE-2026-117626 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117625 - A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read perm
NEAR-REAL-TIME
CVE-2026-117625 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117624 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing object
NEAR-REAL-TIME
CVE-2026-117624 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117623 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar over
NEAR-REAL-TIME
CVE-2026-117623 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117622 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpRespons
NEAR-REAL-TIME
CVE-2026-117622 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117621 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace brow
NEAR-REAL-TIME
CVE-2026-117621 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117620 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in
NEAR-REAL-TIME
CVE-2026-117620 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117619 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, includ
NEAR-REAL-TIME
CVE-2026-117619 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117618 - In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not ch
NEAR-REAL-TIME
CVE-2026-117618 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117617 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only befor
NEAR-REAL-TIME
CVE-2026-117617 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117616 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validatin
NEAR-REAL-TIME
CVE-2026-117616 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117615 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being re
NEAR-REAL-TIME
CVE-2026-117615 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117614 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launc
NEAR-REAL-TIME
CVE-2026-117614 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117613 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization, al
NEAR-REAL-TIME
CVE-2026-117613 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-117612 - Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by th
NEAR-REAL-TIME
CVE-2026-117612 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
Source ↗
INFORMATIONAL
CVE-2026-116593 - Apache Kafka Connect has the /connector-plugins/{connector-type}/config/validate endpoint on its REST API to validate co
NEAR-REAL-TIME
CVE-2026-116593 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:18
apache
Source ↗
INFORMATIONAL
CVE-2026-114349 - When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed
NEAR-REAL-TIME
CVE-2026-114349 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:17
apache
Source ↗
INFORMATIONAL
CVE-2026-112375 - An authenticated Kafka principal with no authorization grants (not even ALTER_CONFIGS) can make a broker read a file or
NEAR-REAL-TIME
CVE-2026-112375 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:17
apache
Source ↗
INFORMATIONAL
CVE-2026-110952 - A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies
NEAR-REAL-TIME
CVE-2026-110952 · NIST NVD - National Vulnerability Database · published 2026-10-28T17:17
apache
Source ↗