Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-93003 - The Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of the
NEAR-REAL-TIME
CVE-2026-93003 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
INFORMATIONAL
CVE-2026-92853 - The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first
NEAR-REAL-TIME
CVE-2026-92853 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
INFORMATIONAL
CVE-2026-92843 - A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger
NEAR-REAL-TIME
CVE-2026-92843 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
INFORMATIONAL
CVE-2026-91057 - `_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the stri
NEAR-REAL-TIME
CVE-2026-91057 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
INFORMATIONAL
CVE-2026-90800 - Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the
NEAR-REAL-TIME
CVE-2026-90800 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
apache
Source ↗
INFORMATIONAL
CVE-2026-90799 - Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user
NEAR-REAL-TIME
CVE-2026-90799 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
apache
Source ↗
INFORMATIONAL
CVE-2026-90798 - A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a rep
NEAR-REAL-TIME
CVE-2026-90798 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
apache
Source ↗
INFORMATIONAL
CVE-2026-90797 - An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote c
NEAR-REAL-TIME
CVE-2026-90797 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
apache
Source ↗
INFORMATIONAL
CVE-2026-86471 - An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server ad
NEAR-REAL-TIME
CVE-2026-86471 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
apache
Source ↗
CRITICAL
CVE-2026-113703 - SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where en
NEAR-REAL-TIME
CVE-2026-113703 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
MEDIUM
CVE-2026-113683 - VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allow
NEAR-REAL-TIME
CVE-2026-113683 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
HIGH
CVE-2026-113682 - Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allo
NEAR-REAL-TIME
CVE-2026-113682 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
MEDIUM
CVE-2026-113681 - OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineo
NEAR-REAL-TIME
CVE-2026-113681 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
CRITICAL
CVE-2026-113678 - Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authen
NEAR-REAL-TIME
CVE-2026-113678 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
MEDIUM
CVE-2026-113677 - Froxlor from 0.10.0 before 2.3.15 contains a missing authorization vulnerability in the SubDomains.delete API command th
NEAR-REAL-TIME
CVE-2026-113677 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
MEDIUM
CVE-2026-113676 - Froxlor from 0.10.0 before 2.3.15 contains an authorization bypass vulnerability in the Admins.get API command that allo
NEAR-REAL-TIME
CVE-2026-113676 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
HIGH
CVE-2026-113613 - FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to w
NEAR-REAL-TIME
CVE-2026-113613 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
MEDIUM
CVE-2026-113612 - SparkyFitness before 0.17.0 contains a missing authorization vulnerability that allows authenticated users to delete oth
NEAR-REAL-TIME
CVE-2026-113612 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
MEDIUM
CVE-2026-113611 - Outline before 1.8.0 contains an improper access revocation vulnerability that allows deleted administrators to keep rec
NEAR-REAL-TIME
CVE-2026-113611 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗
MEDIUM
CVE-2026-113610 - Xen Orchestra before 6.9.0 contains an authorization bypass vulnerability in the xo-server user.set API method that allo
NEAR-REAL-TIME
CVE-2026-113610 · NIST NVD - National Vulnerability Database · published 2026-10-20T16:17
Source ↗