Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
LOW
CVE-2026-79978 - The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl345/adxl345_stream.c
NEAR-REAL-TIME
CVE-2026-79978 · NIST NVD - National Vulnerability Database · published 2026-10-23T20:17
Source ↗
HIGH
CVE-2026-79977 - The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could not authent
NEAR-REAL-TIME
CVE-2026-79977 · NIST NVD - National Vulnerability Database · published 2026-10-23T20:17
Source ↗
HIGH
CVE-2026-19741 - Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default "J01NME" in modules/openthread/Kconfi
NEAR-REAL-TIME
CVE-2026-19741 · NIST NVD - National Vulnerability Database · published 2026-10-23T20:17
Source ↗
LOW
CVE-2026-115797 - A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management
NEAR-REAL-TIME
CVE-2026-115797 · NIST NVD - National Vulnerability Database · published 2026-10-23T20:17
Source ↗
MEDIUM
CVE-2026-115796 - A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Manag
NEAR-REAL-TIME
CVE-2026-115796 · NIST NVD - National Vulnerability Database · published 2026-10-23T20:17
Source ↗
MEDIUM
CVE-2026-116470 - keycloak-services: keycloak-services: SCIM user listing endpoint returns full PII without per-user VIEW authorization ch
NEAR-REAL-TIME
CVE-2026-116470 · Red Hat - CVE Feed · published 2026-10-23T19:35
Red Hat
Source ↗
INFORMATIONAL
CVE-2026-91093 - A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for
NEAR-REAL-TIME
CVE-2026-91093 · NIST NVD - National Vulnerability Database · published 2026-10-23T19:17
Source ↗
MEDIUM
CVE-2026-115845 - An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allo
NEAR-REAL-TIME
CVE-2026-115845 · NIST NVD - National Vulnerability Database · published 2026-10-23T19:17
aws
Source ↗
HIGH
CVE-2026-112342 - Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py that allows a
NEAR-REAL-TIME
CVE-2026-112342 · NIST NVD - National Vulnerability Database · published 2026-10-23T19:17
Source ↗
HIGH
GHSA-r3g7-r4hr-m258 - obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes
NEAR-REAL-TIME
CVE-2026-115478 · GitHub Security Advisories · published 2026-10-23T18:47 · correlated from 2 sources
obsidian-tc
Source ↗
HIGH
GHSA-c8w8-3pqp-wr83 - SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event stream
NEAR-REAL-TIME
CVE-2026-73054 · GitHub Security Advisories · published 2026-10-23T18:34
github
Source ↗
MEDIUM
GHSA-4pjg-x8qj-33j5 - SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden
NEAR-REAL-TIME
CVE-2026-73630 · GitHub Security Advisories · published 2026-10-23T18:31
github
Source ↗
MEDIUM
GHSA-p4qw-vx5p-g984 - SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readers
NEAR-REAL-TIME
CVE-2026-73049 · GitHub Security Advisories · published 2026-10-23T18:30
github
Source ↗
MEDIUM
GHSA-xp3q-r38w-vgqm - SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized
NEAR-REAL-TIME
GitHub Security Advisories · published 2026-10-23T18:29
github
Source ↗
HIGH
CVE-2026-115863 - ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/cl
NEAR-REAL-TIME
CVE-2026-115863 · NIST NVD - National Vulnerability Database · published 2026-10-23T18:17
Source ↗
MEDIUM
CVE-2026-115813 - Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier migh
NEAR-REAL-TIME
CVE-2026-115813 · NIST NVD - National Vulnerability Database · published 2026-10-23T18:17
Source ↗
CRITICAL
CVE-2026-115812 - Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier mig
NEAR-REAL-TIME
CVE-2026-115812 · NIST NVD - National Vulnerability Database · published 2026-10-23T18:17
Source ↗
HIGH
CVE-2026-110975 - A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return d
NEAR-REAL-TIME
CVE-2026-110975 · NIST NVD - National Vulnerability Database · published 2026-10-23T18:17
Source ↗
HIGH
GHSA-737x-cwfr-5vvc - obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP
NEAR-REAL-TIME
CVE-2026-115477 · GitHub Security Advisories · published 2026-10-23T17:30 · correlated from 2 sources
obsidian-tc
Source ↗
HIGH
CVE-2026-87901 - Improper sanitization in the registration module allows reflected Cross-Site Scripting.
NEAR-REAL-TIME
CVE-2026-87901 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17
Source ↗