Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
GHSA-rhj7-vh3v-mcq6 - Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware
NEAR-REAL-TIME
CVE-2026-62160 · GitHub Security Advisories · published 2026-10-29T16:33 · correlated from 2 sources
github
Source ↗
LOW
GHSA-pg53-p7qp-65cv - PocketMine-MP has potential memory/network vulnerability from repeated ResourcePackClientResponsePacket packets
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-29T16:32
pocketmine
Source ↗
MEDIUM
GHSA-68wq-phq7-p2vg - MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow
NEAR-REAL-TIME
CVE-2026-55186 · GitHub Security Advisories · published 2026-10-29T16:32 · correlated from 2 sources
silverstripe
Source ↗
HIGH
CVE-2026-96203 - Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
NEAR-REAL-TIME
CVE-2026-96203 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
microsoft
Source ↗
HIGH
CVE-2026-96192 - Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.
NEAR-REAL-TIME
CVE-2026-96192 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
microsoft
Source ↗
HIGH
CVE-2026-96187 - Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
NEAR-REAL-TIME
CVE-2026-96187 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
microsoft
Source ↗
CRITICAL
CVE-2026-93680 - IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper auth
NEAR-REAL-TIME
CVE-2026-93680 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
INFORMATIONAL
CVE-2026-93571 - Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update req
NEAR-REAL-TIME
CVE-2026-93571 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
INFORMATIONAL
CVE-2026-93570 - Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a craf
NEAR-REAL-TIME
CVE-2026-93570 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90991 - IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to al
NEAR-REAL-TIME
CVE-2026-90991 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90872 - Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_F
NEAR-REAL-TIME
CVE-2026-90872 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90871 - Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.
NEAR-REAL-TIME
CVE-2026-90871 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90870 - A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versi
NEAR-REAL-TIME
CVE-2026-90870 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
HIGH
CVE-2026-90869 - A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress S
NEAR-REAL-TIME
CVE-2026-90869 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
CRITICAL
CVE-2026-90868 - An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind
NEAR-REAL-TIME
CVE-2026-90868 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
HIGH
CVE-2026-90867 - Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.
NEAR-REAL-TIME
CVE-2026-90867 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
CRITICAL
CVE-2026-90866 - A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou
NEAR-REAL-TIME
CVE-2026-90866 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
CRITICAL
CVE-2026-90865 - An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind
NEAR-REAL-TIME
CVE-2026-90865 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
CRITICAL
CVE-2026-90864 - A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou
NEAR-REAL-TIME
CVE-2026-90864 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
CRITICAL
CVE-2026-90863 - Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and
NEAR-REAL-TIME
CVE-2026-90863 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗