Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-67077 - HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the ap
NEAR-REAL-TIME
CVE-2026-67077 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
CRITICAL
CVE-2026-67074 - HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the pr
NEAR-REAL-TIME
CVE-2026-67074 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
HIGH
CVE-2026-67073 - HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an
NEAR-REAL-TIME
CVE-2026-67073 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
MEDIUM
CVE-2026-55369 - Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the e
NEAR-REAL-TIME
CVE-2026-55369 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
LOW
CVE-2026-21830 - HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent
NEAR-REAL-TIME
CVE-2026-21830 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
aws
Source ↗
HIGH
CVE-2026-118040 - In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic
NEAR-REAL-TIME
CVE-2026-118040 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
HIGH
CVE-2026-118039 - In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulne
NEAR-REAL-TIME
CVE-2026-118039 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
HIGH
CVE-2026-118038 - In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the
NEAR-REAL-TIME
CVE-2026-118038 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
HIGH
CVE-2026-118037 - In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,
NEAR-REAL-TIME
CVE-2026-118037 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
HIGH
CVE-2026-118036 - In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop,
NEAR-REAL-TIME
CVE-2026-118036 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
HIGH
CVE-2026-118035 - In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inefficient al
NEAR-REAL-TIME
CVE-2026-118035 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
MEDIUM
CVE-2026-116404 - Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting Sensitive Data Embe
NEAR-REAL-TIME
CVE-2026-116404 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
HIGH
CVE-2026-116393 - Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Con
NEAR-REAL-TIME
CVE-2026-116393 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
HIGH
CVE-2026-116392 - Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue a
NEAR-REAL-TIME
CVE-2026-116392 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
HIGH
CVE-2026-116391 - Deserialization of Untrusted Data vulnerability in GS Plugins GS Logo Slider gs-logo-slider allows Object Injection.This
NEAR-REAL-TIME
CVE-2026-116391 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
MEDIUM
CVE-2026-115957 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Discussion Boar
NEAR-REAL-TIME
CVE-2026-115957 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
CRITICAL
CVE-2026-115904 - Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.241
NEAR-REAL-TIME
CVE-2026-115904 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
linux
Source ↗
HIGH
CVE-2026-115612 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iova.mihai SliceWP
NEAR-REAL-TIME
CVE-2026-115612 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
HIGH
CVE-2026-115609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan GetPaid in
NEAR-REAL-TIME
CVE-2026-115609 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗
CRITICAL
CVE-2026-115607 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP
NEAR-REAL-TIME
CVE-2026-115607 · NIST NVD - National Vulnerability Database · published 2026-10-28T13:17
Source ↗