Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-110975 - A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return d
NEAR-REAL-TIME
CVE-2026-110975 · NIST NVD - National Vulnerability Database · published 2026-10-23T18:17
Source ↗
HIGH
GHSA-737x-cwfr-5vvc - obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP
NEAR-REAL-TIME
CVE-2026-115477 · GitHub Security Advisories · published 2026-10-23T17:30 · correlated from 2 sources
obsidian-tc
Source ↗
HIGH
CVE-2026-87901 - Improper sanitization in the registration module allows reflected Cross-Site Scripting.
NEAR-REAL-TIME
CVE-2026-87901 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17
Source ↗
HIGH
CVE-2026-115810 - Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows aut
NEAR-REAL-TIME
CVE-2026-115810 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17
Source ↗
MEDIUM
CVE-2026-106074 - A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, an
NEAR-REAL-TIME
CVE-2026-106074 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17 · correlated from 2 sources
Red Hat
Source ↗
LOW
CVE-2026-106073 - A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissio
NEAR-REAL-TIME
CVE-2026-106073 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17 · correlated from 2 sources
Red Hat
Source ↗
MEDIUM
CVE-2026-106072 - A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when
NEAR-REAL-TIME
CVE-2026-106072 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17 · correlated from 2 sources
Red Hat
Source ↗
LOW
CVE-2026-106071 - A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allo
NEAR-REAL-TIME
CVE-2026-106071 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17 · correlated from 2 sources
Red Hat
Source ↗
LOW
CVE-2026-106070 - A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after th
NEAR-REAL-TIME
CVE-2026-106070 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17 · correlated from 2 sources
Red Hat
Source ↗
HIGH
CVE-2026-106069 - A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP addres
NEAR-REAL-TIME
CVE-2026-106069 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17
Source ↗
HIGH
CVE-2026-105483 - A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a con
NEAR-REAL-TIME
CVE-2026-105483 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17
Source ↗
HIGH
CVE-2026-105482 - A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() f
NEAR-REAL-TIME
CVE-2026-105482 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17
Source ↗
MEDIUM
CVE-2026-105481 - A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the
NEAR-REAL-TIME
CVE-2026-105481 · NIST NVD - National Vulnerability Database · published 2026-10-23T17:17 · correlated from 2 sources
Red Hat
Source ↗
INFORMATIONAL
CVE-2026-52356 - An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows
NEAR-REAL-TIME
CVE-2026-52356 · NIST NVD - National Vulnerability Database · published 2026-10-23T16:16
Source ↗
INFORMATIONAL
CVE-2026-50787 - e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/c
NEAR-REAL-TIME
CVE-2026-50787 · NIST NVD - National Vulnerability Database · published 2026-10-23T16:16
Source ↗
INFORMATIONAL
CVE-2025-45528 - An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a c
NEAR-REAL-TIME
CVE-2025-45528 · NIST NVD - National Vulnerability Database · published 2026-10-23T16:16
Source ↗
INFORMATIONAL
CVE-2026-58497 - Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP
NEAR-REAL-TIME
CVE-2026-58497 · NIST NVD - National Vulnerability Database · published 2026-10-23T15:17
Source ↗
CRITICAL
CVE-2026-55486 - The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.0
NEAR-REAL-TIME
CVE-2026-55486 · NIST NVD - National Vulnerability Database · published 2026-10-23T15:17
Source ↗
MEDIUM
CVE-2026-55465 - The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.0
NEAR-REAL-TIME
CVE-2026-55465 · NIST NVD - National Vulnerability Database · published 2026-10-23T15:17
Source ↗
MEDIUM
CVE-2026-55463 - The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 4.11
NEAR-REAL-TIME
CVE-2026-55463 · NIST NVD - National Vulnerability Database · published 2026-10-23T15:17
Source ↗