Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-102786 - Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Galler
NEAR-REAL-TIME
CVE-2026-102786 · NIST NVD - National Vulnerability Database · published 2026-10-23T15:17
Source ↗
HIGH
CVE-2026-57845 - datasets: datasets: Arbitrary code execution via insecure pickle deserialization
NEAR-REAL-TIME
CVE-2026-57845 · Red Hat - CVE Feed · published 2026-10-23T15:14 · correlated from 2 sources
Red Hat
Source ↗
HIGH
CVE-2026-109411 - samba: Access control bypass via vfs_ceph_rgw case-insensitive open
NEAR-REAL-TIME
CVE-2026-109411 · Red Hat - CVE Feed · published 2026-10-23T15:00
Red Hat
Source ↗
HIGH
CVE-2026-93640 - A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows t
NEAR-REAL-TIME
CVE-2026-93640 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
HIGH
CVE-2026-93639 - A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no expli
NEAR-REAL-TIME
CVE-2026-93639 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-93638 - A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an unauthent
NEAR-REAL-TIME
CVE-2026-93638 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-93636 - An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query otherwi
NEAR-REAL-TIME
CVE-2026-93636 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-93634 - A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert f
NEAR-REAL-TIME
CVE-2026-93634 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-93633 - A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access
NEAR-REAL-TIME
CVE-2026-93633 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
HIGH
CVE-2026-93631 - A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition al
NEAR-REAL-TIME
CVE-2026-93631 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-93630 - A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite (ZCS) allows an una
NEAR-REAL-TIME
CVE-2026-93630 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-93629 - An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to
NEAR-REAL-TIME
CVE-2026-93629 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-93628 - An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an
NEAR-REAL-TIME
CVE-2026-93628 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-93627 - An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an
NEAR-REAL-TIME
CVE-2026-93627 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
INFORMATIONAL
CVE-2026-57208 - Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vulnerability
NEAR-REAL-TIME
CVE-2026-57208 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-57207 - NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running w
NEAR-REAL-TIME
CVE-2026-57207 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
INFORMATIONAL
CVE-2026-55826 - The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to befo
NEAR-REAL-TIME
CVE-2026-55826 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
wordpress
Source ↗
MEDIUM
CVE-2026-55606 - odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHC
NEAR-REAL-TIME
CVE-2026-55606 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
CRITICAL
CVE-2026-53921 - odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 I
NEAR-REAL-TIME
CVE-2026-53921 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
INFORMATIONAL
CVE-2026-53920 - odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before version 25
NEAR-REAL-TIME
CVE-2026-53920 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗