Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-51863 - DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v
NEAR-REAL-TIME
CVE-2026-51863 · NIST NVD - National Vulnerability Database · published 2026-10-29T18:17
Source ↗
INFORMATIONAL
CVE-2026-51851 - modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:Fil
NEAR-REAL-TIME
CVE-2026-51851 · NIST NVD - National Vulnerability Database · published 2026-10-29T18:17
Source ↗
INFORMATIONAL
CVE-2026-118769 - Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size con
NEAR-REAL-TIME
CVE-2026-118769 · NIST NVD - National Vulnerability Database · published 2026-10-29T18:17
Source ↗
INFORMATIONAL
CVE-2026-118768 - Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response
NEAR-REAL-TIME
CVE-2026-118768 · NIST NVD - National Vulnerability Database · published 2026-10-29T18:17
Source ↗
MEDIUM
CVE-2026-118767 - Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containi
NEAR-REAL-TIME
CVE-2026-118767 · NIST NVD - National Vulnerability Database · published 2026-10-29T18:17
Source ↗
MEDIUM
CVE-2026-118766 - Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while po
NEAR-REAL-TIME
CVE-2026-118766 · NIST NVD - National Vulnerability Database · published 2026-10-29T18:17
oracle
Source ↗
INFORMATIONAL
CVE-2026-116566 - socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be
NEAR-REAL-TIME
CVE-2026-116566 · NIST NVD - National Vulnerability Database · published 2026-10-29T18:17
Source ↗
HIGH
CVE-2026-107347 - HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes
NEAR-REAL-TIME
CVE-2026-107347 · NIST NVD - National Vulnerability Database · published 2026-10-29T18:17
Source ↗
MEDIUM
CVE-2026-102260 - HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API e
NEAR-REAL-TIME
CVE-2026-102260 · NIST NVD - National Vulnerability Database · published 2026-10-29T18:17
Source ↗
HIGH
CVE-2026-118772 - joi: joi: Denial of Service via inefficient regular expression in email validation
NEAR-REAL-TIME
CVE-2026-118772 · Red Hat - CVE Feed · published 2026-10-29T18:13 · correlated from 3 sources
Red Hatjoi@hapi
Source ↗
HIGH
CVE-2026-62374 - SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.19.0 and e
NEAR-REAL-TIME
CVE-2026-62374 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:18 · correlated from 2 sources
@sd-jwt
Source ↗
HIGH
CVE-2026-11587 - SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database
NEAR-REAL-TIME
CVE-2026-11587 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:18
Source ↗
HIGH
CVE-2026-119115 - Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer)
NEAR-REAL-TIME
CVE-2026-119115 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:18
aws
Source ↗
INFORMATIONAL
CVE-2026-118765 - Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then
NEAR-REAL-TIME
CVE-2026-118765 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:18
Source ↗
CRITICAL
CVE-2026-118762 - Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml wo
NEAR-REAL-TIME
CVE-2026-118762 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:18
Source ↗
MEDIUM
CVE-2026-118760 - Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. From 0.5.1 until 2.1
NEAR-REAL-TIME
CVE-2026-118760 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:18
Source ↗
HIGH
CVE-2026-118758 - Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the
NEAR-REAL-TIME
CVE-2026-118758 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:18
Source ↗
HIGH
CVE-2026-115805 - Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local use
NEAR-REAL-TIME
CVE-2026-115805 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:18
linux
Source ↗
CRITICAL
CVE-2026-107060 - Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to anoth
NEAR-REAL-TIME
CVE-2026-107060 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗
INFORMATIONAL
CVE-2026-107059 - An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch
NEAR-REAL-TIME
CVE-2026-107059 · NIST NVD - National Vulnerability Database · published 2026-10-29T17:17
Source ↗