Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-109111 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-109111 · NIST NVD - National Vulnerability Database · published 2026-10-24T23:16
Source ↗
MEDIUM
CVE-2026-115982 - A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file
NEAR-REAL-TIME
CVE-2026-115982 · NIST NVD - National Vulnerability Database · published 2026-10-24T22:16
Source ↗
LOW
CVE-2026-115981 - A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown function
NEAR-REAL-TIME
CVE-2026-115981 · NIST NVD - National Vulnerability Database · published 2026-10-24T22:16
Source ↗
HIGH
CVE-2026-115973 - A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPassword
NEAR-REAL-TIME
CVE-2026-115973 · NIST NVD - National Vulnerability Database · published 2026-10-24T19:17
Source ↗
CRITICAL
CVE-2026-114820 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE
NEAR-REAL-TIME
CVE-2026-114820 · NIST NVD - National Vulnerability Database · published 2026-10-24T19:17
oracleapple
Source ↗
MEDIUM
CVE-2026-115972 - A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function
NEAR-REAL-TIME
CVE-2026-115972 · NIST NVD - National Vulnerability Database · published 2026-10-24T18:16
Source ↗
MEDIUM
CVE-2026-115971 - A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/we
NEAR-REAL-TIME
CVE-2026-115971 · NIST NVD - National Vulnerability Database · published 2026-10-24T18:16
Source ↗
HIGH
CVE-2026-115970 - A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-updat
NEAR-REAL-TIME
CVE-2026-115970 · NIST NVD - National Vulnerability Database · published 2026-10-24T18:16
Source ↗
HIGH
CVE-2026-115969 - A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the com
NEAR-REAL-TIME
CVE-2026-115969 · NIST NVD - National Vulnerability Database · published 2026-10-24T16:16
Source ↗
CRITICAL
CVE-2026-115933 - Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a t
NEAR-REAL-TIME
CVE-2026-115933 · NIST NVD - National Vulnerability Database · published 2026-10-24T15:17
Source ↗
INFORMATIONAL
CVE-2026-115557 - Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without ce
NEAR-REAL-TIME
CVE-2026-115557 · NIST NVD - National Vulnerability Database · published 2026-10-24T15:17
Source ↗
HIGH
CVE-2026-114704 - Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object Injection.T
NEAR-REAL-TIME
CVE-2026-114704 · NIST NVD - National Vulnerability Database · published 2026-10-24T14:16
Source ↗
INFORMATIONAL
CVE-2026-114629 - Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body para
NEAR-REAL-TIME
CVE-2026-114629 · NIST NVD - National Vulnerability Database · published 2026-10-24T14:16
Source ↗
MEDIUM
CVE-2026-114192 - Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configure
NEAR-REAL-TIME
CVE-2026-114192 · NIST NVD - National Vulnerability Database · published 2026-10-24T14:16
Source ↗
HIGH
CVE-2026-114191 - Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-wooc
NEAR-REAL-TIME
CVE-2026-114191 · NIST NVD - National Vulnerability Database · published 2026-10-24T14:16
Source ↗
CRITICAL
CVE-2026-115932 - When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it do
NEAR-REAL-TIME
CVE-2026-115932 · NIST NVD - National Vulnerability Database · published 2026-10-24T13:16
Source ↗
MEDIUM
CVE-2026-116020 - BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authentic
NEAR-REAL-TIME
CVE-2026-116020 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
HIGH
CVE-2026-116019 - Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public
NEAR-REAL-TIME
CVE-2026-116019 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
MEDIUM
CVE-2026-116018 - ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authent
NEAR-REAL-TIME
CVE-2026-116018 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
MEDIUM
CVE-2026-116017 - Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceCo
NEAR-REAL-TIME
CVE-2026-116017 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗