Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-96192 - Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.
NEAR-REAL-TIME
CVE-2026-96192 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
microsoft
Source ↗
HIGH
CVE-2026-96187 - Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
NEAR-REAL-TIME
CVE-2026-96187 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
microsoft
Source ↗
CRITICAL
CVE-2026-93680 - IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper auth
NEAR-REAL-TIME
CVE-2026-93680 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
INFORMATIONAL
CVE-2026-93571 - Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update req
NEAR-REAL-TIME
CVE-2026-93571 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
INFORMATIONAL
CVE-2026-93570 - Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a craf
NEAR-REAL-TIME
CVE-2026-93570 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90991 - IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to al
NEAR-REAL-TIME
CVE-2026-90991 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90872 - Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_F
NEAR-REAL-TIME
CVE-2026-90872 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90871 - Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.
NEAR-REAL-TIME
CVE-2026-90871 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90870 - A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versi
NEAR-REAL-TIME
CVE-2026-90870 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
HIGH
CVE-2026-90869 - A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress S
NEAR-REAL-TIME
CVE-2026-90869 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
CRITICAL
CVE-2026-90868 - An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind
NEAR-REAL-TIME
CVE-2026-90868 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
HIGH
CVE-2026-90867 - Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.
NEAR-REAL-TIME
CVE-2026-90867 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
CRITICAL
CVE-2026-90866 - A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou
NEAR-REAL-TIME
CVE-2026-90866 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
CRITICAL
CVE-2026-90865 - An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind
NEAR-REAL-TIME
CVE-2026-90865 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
CRITICAL
CVE-2026-90864 - A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou
NEAR-REAL-TIME
CVE-2026-90864 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
CRITICAL
CVE-2026-90863 - Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and
NEAR-REAL-TIME
CVE-2026-90863 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90862 - Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 202
NEAR-REAL-TIME
CVE-2026-90862 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90861 - Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear
NEAR-REAL-TIME
CVE-2026-90861 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-88090 - Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
NEAR-REAL-TIME
CVE-2026-88090 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:19
microsoft
Source ↗
HIGH
CVE-2026-88077 - Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges
NEAR-REAL-TIME
CVE-2026-88077 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:19
microsoft
Source ↗