Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-114191 - Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-wooc
NEAR-REAL-TIME
CVE-2026-114191 · NIST NVD - National Vulnerability Database · published 2026-10-24T14:16
Source ↗
CRITICAL
CVE-2026-115932 - When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it do
NEAR-REAL-TIME
CVE-2026-115932 · NIST NVD - National Vulnerability Database · published 2026-10-24T13:16
Source ↗
MEDIUM
CVE-2026-116020 - BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authentic
NEAR-REAL-TIME
CVE-2026-116020 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
HIGH
CVE-2026-116019 - Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public
NEAR-REAL-TIME
CVE-2026-116019 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
MEDIUM
CVE-2026-116018 - ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authent
NEAR-REAL-TIME
CVE-2026-116018 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
MEDIUM
CVE-2026-116017 - Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceCo
NEAR-REAL-TIME
CVE-2026-116017 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
HIGH
CVE-2026-116016 - yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-
NEAR-REAL-TIME
CVE-2026-116016 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
MEDIUM
CVE-2026-116015 - yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that all
NEAR-REAL-TIME
CVE-2026-116015 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
HIGH
CVE-2026-116014 - open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bi
NEAR-REAL-TIME
CVE-2026-116014 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
LOW
CVE-2026-116013 - OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_n
NEAR-REAL-TIME
CVE-2026-116013 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
LOW
CVE-2026-116012 - Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining
NEAR-REAL-TIME
CVE-2026-116012 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
HIGH
CVE-2026-116011 - Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthentica
NEAR-REAL-TIME
CVE-2026-116011 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
MEDIUM
CVE-2026-116010 - RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated teachers to write reco
NEAR-REAL-TIME
CVE-2026-116010 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
HIGH
CVE-2026-116009 - Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to wr
NEAR-REAL-TIME
CVE-2026-116009 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
MEDIUM
CVE-2026-116008 - DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::updateAssign() that allo
NEAR-REAL-TIME
CVE-2026-116008 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
Source ↗
HIGH
CVE-2026-110018 - The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordP
NEAR-REAL-TIME
CVE-2026-110018 · NIST NVD - National Vulnerability Database · published 2026-10-24T12:16
wordpress
Source ↗
MEDIUM
CVE-2026-115998 - IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept
NEAR-REAL-TIME
CVE-2026-115998 · NIST NVD - National Vulnerability Database · published 2026-10-24T10:17
Source ↗
MEDIUM
CVE-2026-115994 - BOLA Allows Cross-Project Target Tampering  in Cervantes version v1.3-beta could allow an attacker modify or delete targ
NEAR-REAL-TIME
CVE-2026-115994 · NIST NVD - National Vulnerability Database · published 2026-10-24T10:17
Source ↗
MEDIUM
CVE-2026-114705 - Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Con
NEAR-REAL-TIME
CVE-2026-114705 · NIST NVD - National Vulnerability Database · published 2026-10-24T10:17
Source ↗
MEDIUM
CVE-2026-114194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser
NEAR-REAL-TIME
CVE-2026-114194 · NIST NVD - National Vulnerability Database · published 2026-10-24T10:17
Source ↗