Threat Feed
Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-92092 - openshift-ansible: openshift-ansible: Installer container downloads and executes remote inventory script without integri
Source ↗
CVE-2026-92092 ·
Red Hat - CVE Feed · published 2026-10-28T16:55
· correlated from 2 sources
Red Hat
MEDIUM
CVE-2026-118581 - org.mongodb/bson: MongoDB Java Driver: Unintended command modification via improper BSON document length validation
Source ↗
CVE-2026-118581 ·
Red Hat - CVE Feed · published 2026-10-28T16:51
· correlated from 2 sources
Red Hat
MEDIUM
CVE-2026-115644 - org.apache.kafka/connect-runtime: Apache Kafka Connect: Authentication bypass via separate admin listener
Source ↗
CVE-2026-115644 ·
Red Hat - CVE Feed · published 2026-10-28T16:45
· correlated from 2 sources
Red Hatapache
HIGH
CVE-2026-111551 - org.apache.kafka/kafka-streams: org.apache.kafka/kafka-clients: Apache Kafka: Denial of Service via memory exhaustion du
Source ↗
CVE-2026-111551 ·
Red Hat - CVE Feed · published 2026-10-28T16:45
· correlated from 2 sources
Red Hatapache
MEDIUM
CVE-2026-111496 - org.apache.kafka/kafka-streams: Kafka Streams: Denial of Service via integer overflow in timestamp calculation
Source ↗
CVE-2026-111496 ·
Red Hat - CVE Feed · published 2026-10-28T16:45
· correlated from 2 sources
Red Hatapache
HIGH
CVE-2026-111115 - org.apache.kafka/kafka-clients: Apache Kafka: Denial of Service via uncontrolled memory allocation in flexible request h
Source ↗
CVE-2026-111115 ·
Red Hat - CVE Feed · published 2026-10-28T16:44
· correlated from 2 sources
Red Hatapache
HIGH
CVE-2026-111108 - org.apache.kafka/kafka-clients: Apache kafka: Denial of Service via excessive memory allocation during request parsing
Source ↗
CVE-2026-111108 ·
Red Hat - CVE Feed · published 2026-10-28T16:38
· correlated from 2 sources
Red Hatapache
MEDIUM
CVE-2026-111073 - org.apache.kafka/kafka-clients: Apache Kafka: Denial of Service via unbounded telemetry payload decompression
Source ↗
CVE-2026-111073 ·
Red Hat - CVE Feed · published 2026-10-28T16:37
· correlated from 2 sources
Red Hatapache
HIGH
CVE-2026-110985 - org.apache.kafka/kafka-clients: Apache Kafka: Authentication bypass via missing JWT signature verification
Source ↗
CVE-2026-110985 ·
Red Hat - CVE Feed · published 2026-10-28T16:37
· correlated from 2 sources
Red Hatapache
HIGH
CVE-2026-67187 - Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows u
Source ↗
CVE-2026-67187 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
wordpress
HIGH
CVE-2026-59979 - YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snaps
Source ↗
CVE-2026-59979 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
MEDIUM
CVE-2026-50543 - Xibo is an open source digital signage platform with a web content management system and Windows display player software
Source ↗
CVE-2026-50543 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
MEDIUM
CVE-2026-50542 - Xibo is an open source digital signage platform with a web content management system and Windows display player software
Source ↗
CVE-2026-50542 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
MEDIUM
CVE-2026-50539 - Xibo is an open source digital signage platform with a web content management system and Windows display player software
Source ↗
CVE-2026-50539 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
INFORMATIONAL
CVE-2026-47235 - SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before th
Source ↗
CVE-2026-47235 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
CRITICAL
CVE-2026-44179 - XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 un
Source ↗
CVE-2026-44179 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
MEDIUM
CVE-2026-118029 - Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) befor
Source ↗
CVE-2026-118029 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
aws
HIGH
CVE-2026-116778 - FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.2253 and 1.6.0-RC-1,
Source ↗
CVE-2026-116778 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
INFORMATIONAL
CVE-2026-116776 - USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overreported capacity on USB
Source ↗
CVE-2026-116776 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
HIGH
CVE-2026-112357 - GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local pri
Source ↗
CVE-2026-112357 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T16:17