Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-119128 - ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticat
NEAR-REAL-TIME
CVE-2026-119128 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-119127 - ZITADEL 4.0.0 before 4.19.5 contains a host header injection vulnerability in the Login V2 UI that allows unauthenticate
NEAR-REAL-TIME
CVE-2026-119127 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
LOW
CVE-2026-119126 - Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null or undefined values w
NEAR-REAL-TIME
CVE-2026-119126 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
LOW
CVE-2026-119125 - Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a field reverted by a beforeSave
NEAR-REAL-TIME
CVE-2026-119125 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
MEDIUM
CVE-2026-119122 - Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API cl
NEAR-REAL-TIME
CVE-2026-119122 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
MEDIUM
CVE-2026-119121 - Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows auth
NEAR-REAL-TIME
CVE-2026-119121 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-119120 - Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bod
NEAR-REAL-TIME
CVE-2026-119120 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-119119 - Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails
NEAR-REAL-TIME
CVE-2026-119119 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
MEDIUM
CVE-2026-119118 - Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to interce
NEAR-REAL-TIME
CVE-2026-119118 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
INFORMATIONAL
CVE-2026-118673 - KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2
NEAR-REAL-TIME
CVE-2026-118673 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-118085 - Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.
NEAR-REAL-TIME
CVE-2026-118085 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
MEDIUM
CVE-2026-118084 - Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions.
NEAR-REAL-TIME
CVE-2026-118084 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-118083 - Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.
NEAR-REAL-TIME
CVE-2026-118083 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-118082 - Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.
NEAR-REAL-TIME
CVE-2026-118082 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-118081 - Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.
NEAR-REAL-TIME
CVE-2026-118081 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-118080 - Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.
NEAR-REAL-TIME
CVE-2026-118080 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-118079 - Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.
NEAR-REAL-TIME
CVE-2026-118079 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-118078 - Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.
NEAR-REAL-TIME
CVE-2026-118078 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-118077 - Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.
NEAR-REAL-TIME
CVE-2026-118077 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗
HIGH
CVE-2026-118076 - Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.
NEAR-REAL-TIME
CVE-2026-118076 · NIST NVD - National Vulnerability Database · published 2026-10-29T16:18
Source ↗