Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-112356 - GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability in the Webmail comp
NEAR-REAL-TIME
CVE-2026-112356 · NIST NVD - National Vulnerability Database · published 2026-10-28T16:17
Source ↗
MEDIUM
CVE-2026-115455 - gcc: Stack overflow in std::bitset on libstdc++
NEAR-REAL-TIME
CVE-2026-115455 · Red Hat - CVE Feed · published 2026-10-28T15:46 · correlated from 2 sources
Red Hat
Source ↗
INFORMATIONAL
CVE-2026-115402 - OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) vi
NEAR-REAL-TIME
CVE-2026-115402 · NIST NVD - National Vulnerability Database · published 2026-10-28T15:17
Source ↗
HIGH
CVE-2026-106972 - Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attack
NEAR-REAL-TIME
CVE-2026-106972 · NIST NVD - National Vulnerability Database · published 2026-10-28T15:17
Source ↗
INFORMATIONAL
CVE-2026-106971 - An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attac
NEAR-REAL-TIME
CVE-2026-106971 · NIST NVD - National Vulnerability Database · published 2026-10-28T15:17
Source ↗
MEDIUM
CVE-2026-118959 - keycloak-services: keycloak-services: Required actions bypassed via kc_action parameter
NEAR-REAL-TIME
CVE-2026-118959 · Red Hat - CVE Feed · published 2026-10-28T14:45 · correlated from 2 sources
Red Hat
Source ↗
INFORMATIONAL
CVE-2026-59959 - SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. P
NEAR-REAL-TIME
CVE-2026-59959 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:17
Source ↗
HIGH
CVE-2026-59164 - NORA is a self-hosted artifact registry and pull-through cache. Prior to 0.9.5, `nora-registry` authenticates the token-
NEAR-REAL-TIME
CVE-2026-59164 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:17
Source ↗
HIGH
CVE-2026-52729 - Xibo is an open source digital signage platform with a web content management system and Windows display player software
NEAR-REAL-TIME
CVE-2026-52729 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:17
Source ↗
MEDIUM
CVE-2026-50541 - Xibo is an open source digital signage platform with a web content management system and Windows display player software
NEAR-REAL-TIME
CVE-2026-50541 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:17
Source ↗
HIGH
CVE-2026-116390 - Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything — WordPress & WooCommerce Filter
NEAR-REAL-TIME
CVE-2026-116390 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:16
wordpress
Source ↗
HIGH
CVE-2026-116389 - Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-media-rename allows Object Inje
NEAR-REAL-TIME
CVE-2026-116389 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:16
Source ↗
INFORMATIONAL
CVE-2026-116078 - Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit a
NEAR-REAL-TIME
CVE-2026-116078 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:16
Source ↗
CRITICAL
CVE-2026-115968 - Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Member ultimate-member allows Object Injecti
NEAR-REAL-TIME
CVE-2026-115968 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:16
Source ↗
HIGH
CVE-2026-115603 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Advanced Ads GmbH
NEAR-REAL-TIME
CVE-2026-115603 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:16
Source ↗
HIGH
CVE-2026-115590 - Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Do
NEAR-REAL-TIME
CVE-2026-115590 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:16
Source ↗
INFORMATIONAL
CVE-2026-105420 - Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scrip
NEAR-REAL-TIME
CVE-2026-105420 · NIST NVD - National Vulnerability Database · published 2026-10-28T14:16
Source ↗
MEDIUM
CVE-2026-93516 - A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server b
NEAR-REAL-TIME
CVE-2026-93516 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
MEDIUM
CVE-2026-67080 - HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional
NEAR-REAL-TIME
CVE-2026-67080 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
MEDIUM
CVE-2026-67079 - HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application withi
NEAR-REAL-TIME
CVE-2026-67079 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗