Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-107887 - The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the actio
NEAR-REAL-TIME
CVE-2026-107887 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
MEDIUM
CVE-2026-105199 - The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its A
NEAR-REAL-TIME
CVE-2026-105199 · NIST NVD - National Vulnerability Database · published 2026-10-24T06:16
wordpress
Source ↗
HIGH
CVE-2026-115807 - The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v
NEAR-REAL-TIME
CVE-2026-115807 · NIST NVD - National Vulnerability Database · published 2026-10-24T05:17
wordpress
Source ↗
CRITICAL
CVE-2026-115806 - The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,
NEAR-REAL-TIME
CVE-2026-115806 · NIST NVD - National Vulnerability Database · published 2026-10-24T05:17
wordpress
Source ↗
MEDIUM
CVE-2026-115929 - MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root cer
NEAR-REAL-TIME
CVE-2026-115929 · NIST NVD - National Vulnerability Database · published 2026-10-24T01:17
Source ↗
CRITICAL
CVE-2026-115931 - Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not r
NEAR-REAL-TIME
CVE-2026-115931 · NIST NVD - National Vulnerability Database · published 2026-10-23T23:17
Source ↗
INFORMATIONAL
CVE-2026-110814 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-110814 · NIST NVD - National Vulnerability Database · published 2026-10-23T23:17
Source ↗
INFORMATIONAL
CVE-2026-108793 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-108793 · NIST NVD - National Vulnerability Database · published 2026-10-23T23:17
Source ↗
INFORMATIONAL
CVE-2026-108537 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
NEAR-REAL-TIME
CVE-2026-108537 · NIST NVD - National Vulnerability Database · published 2026-10-23T23:17
Source ↗
LOW
GHSA-9vhv-jxww-xfm5 - filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
NEAR-REAL-TIME
CVE-2026-112913 · GitHub Security Advisories · published 2026-10-23T22:28
filelock
Source ↗
LOW
GHSA-567q-5qvw-pf92 - filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break
NEAR-REAL-TIME
CVE-2026-112907 · GitHub Security Advisories · published 2026-10-23T22:27
filelock
Source ↗
HIGH
CVE-2026-115938 - Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is ev
NEAR-REAL-TIME
CVE-2026-115938 · NIST NVD - National Vulnerability Database · published 2026-10-23T22:16
oracle
Source ↗
HIGH
CVE-2026-115937 - The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong
NEAR-REAL-TIME
CVE-2026-115937 · NIST NVD - National Vulnerability Database · published 2026-10-23T22:16
Source ↗
HIGH
CVE-2026-115935 - The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel
NEAR-REAL-TIME
CVE-2026-115935 · NIST NVD - National Vulnerability Database · published 2026-10-23T22:16
Source ↗
CRITICAL
CVE-2026-115893 - Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 c
NEAR-REAL-TIME
CVE-2026-115893 · NIST NVD - National Vulnerability Database · published 2026-10-23T22:16
Source ↗
HIGH
CVE-2026-115887 - GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas. From 1.24.1 until
NEAR-REAL-TIME
CVE-2026-115887 · NIST NVD - National Vulnerability Database · published 2026-10-23T22:16
Source ↗
INFORMATIONAL
CVE-2026-115885 - The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --ver
NEAR-REAL-TIME
CVE-2026-115885 · NIST NVD - National Vulnerability Database · published 2026-10-23T22:16
Source ↗
MEDIUM
CVE-2026-115801 - A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::
NEAR-REAL-TIME
CVE-2026-115801 · NIST NVD - National Vulnerability Database · published 2026-10-23T22:16
Source ↗
MEDIUM
GHSA-m5mm-p8h7-m29v - Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
NEAR-REAL-TIME
CVE-2026-115897 · GitHub Security Advisories · published 2026-10-23T22:09 · correlated from 3 sources
serialize-javascriptRed Hat
Source ↗
MEDIUM
GHSA-2wqp-q3c6-ccj5 - MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
NEAR-REAL-TIME
CVE-2026-115886 · GitHub Security Advisories · published 2026-10-23T22:07 · correlated from 3 sources
mlflowRed Hat
Source ↗