Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-90862 - Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 202
NEAR-REAL-TIME
CVE-2026-90862 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-90861 - Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear
NEAR-REAL-TIME
CVE-2026-90861 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:20
Source ↗
MEDIUM
CVE-2026-88090 - Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
NEAR-REAL-TIME
CVE-2026-88090 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:19
microsoft
Source ↗
HIGH
CVE-2026-88077 - Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges
NEAR-REAL-TIME
CVE-2026-88077 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:19
microsoft
Source ↗
HIGH
CVE-2026-85899 - Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.
NEAR-REAL-TIME
CVE-2026-85899 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:19
microsoft
Source ↗
MEDIUM
CVE-2026-85330 - Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over
NEAR-REAL-TIME
CVE-2026-85330 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:19
microsoft
Source ↗
MEDIUM
CVE-2026-84296 - Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2
NEAR-REAL-TIME
CVE-2026-84296 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:19
Source ↗
CRITICAL
CVE-2026-84295 - Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allo
NEAR-REAL-TIME
CVE-2026-84295 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:19
Source ↗
HIGH
CVE-2026-84294 - Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 20
NEAR-REAL-TIME
CVE-2026-84294 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:19
Source ↗
MEDIUM
CVE-2026-77819 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to im
NEAR-REAL-TIME
CVE-2026-77819 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
MEDIUM
CVE-2026-77817 - IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to
NEAR-REAL-TIME
CVE-2026-77817 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
INFORMATIONAL
CVE-2026-66912 - Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Cla
NEAR-REAL-TIME
CVE-2026-66912 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
INFORMATIONAL
CVE-2026-66911 - Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due
NEAR-REAL-TIME
CVE-2026-66911 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-62131 - Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.
NEAR-REAL-TIME
CVE-2026-62131 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
zoho
Source ↗
CRITICAL
CVE-2026-62018 - Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.
NEAR-REAL-TIME
CVE-2026-62018 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-62017 - Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.
NEAR-REAL-TIME
CVE-2026-62017 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-62016 - Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.
NEAR-REAL-TIME
CVE-2026-62016 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-62015 - Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.
NEAR-REAL-TIME
CVE-2026-62015 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-62014 - Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.
NEAR-REAL-TIME
CVE-2026-62014 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
CRITICAL
CVE-2026-62013 - Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.
NEAR-REAL-TIME
CVE-2026-62013 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗