Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-115994 - BOLA Allows Cross-Project Target Tampering  in Cervantes version v1.3-beta could allow an attacker modify or delete targ
NEAR-REAL-TIME
CVE-2026-115994 · NIST NVD - National Vulnerability Database · published 2026-10-24T10:17
Source ↗
MEDIUM
CVE-2026-114705 - Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Con
NEAR-REAL-TIME
CVE-2026-114705 · NIST NVD - National Vulnerability Database · published 2026-10-24T10:17
Source ↗
MEDIUM
CVE-2026-114194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser
NEAR-REAL-TIME
CVE-2026-114194 · NIST NVD - National Vulnerability Database · published 2026-10-24T10:17
Source ↗
MEDIUM
CVE-2026-115993 - Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker t
NEAR-REAL-TIME
CVE-2026-115993 · NIST NVD - National Vulnerability Database · published 2026-10-24T09:16
Source ↗
CRITICAL
CVE-2026-94075 - Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injecti
NEAR-REAL-TIME
CVE-2026-94075 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
HIGH
CVE-2026-115975 - Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delet
NEAR-REAL-TIME
CVE-2026-115975 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
HIGH
CVE-2026-114697 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuarkA QA Analytic
NEAR-REAL-TIME
CVE-2026-114697 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
HIGH
CVE-2026-114695 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infomaniak Network
NEAR-REAL-TIME
CVE-2026-114695 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
HIGH
CVE-2026-114694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Ma
NEAR-REAL-TIME
CVE-2026-114694 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
MEDIUM
CVE-2026-114693 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugins360 Labs Al
NEAR-REAL-TIME
CVE-2026-114693 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
CRITICAL
CVE-2026-114196 - Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue aff
NEAR-REAL-TIME
CVE-2026-114196 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
MEDIUM
CVE-2026-114190 - Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespee
NEAR-REAL-TIME
CVE-2026-114190 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
HIGH
CVE-2026-114179 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better
NEAR-REAL-TIME
CVE-2026-114179 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
HIGH
CVE-2026-114178 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold Grid W3 Total
NEAR-REAL-TIME
CVE-2026-114178 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
HIGH
CVE-2026-112869 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Hearle We’re
NEAR-REAL-TIME
CVE-2026-112869 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
CRITICAL
CVE-2026-112866 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product
NEAR-REAL-TIME
CVE-2026-112866 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
HIGH
CVE-2026-112844 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event
NEAR-REAL-TIME
CVE-2026-112844 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
CRITICAL
CVE-2026-111402 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software
NEAR-REAL-TIME
CVE-2026-111402 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
MEDIUM
CVE-2026-110892 - Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces
NEAR-REAL-TIME
CVE-2026-110892 · NIST NVD - National Vulnerability Database · published 2026-10-24T08:16
Source ↗
MEDIUM
CVE-2026-115803 - A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter
NEAR-REAL-TIME
CVE-2026-115803 · NIST NVD - National Vulnerability Database · published 2026-10-24T07:16
sap
Source ↗