Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-50056 - A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) allows the
NEAR-REAL-TIME
CVE-2026-50056 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
HIGH
CVE-2026-50053 - A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticated requests to /h/* t
NEAR-REAL-TIME
CVE-2026-50053 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-115786 - A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume ano
NEAR-REAL-TIME
CVE-2026-115786 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-115785 - An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS) all
NEAR-REAL-TIME
CVE-2026-115785 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
INFORMATIONAL
CVE-2026-115481 - baserCMS is a website development framework. Starting in version 5.0.0-beta1 and prior to versions 5.3.2 and 5.4.2, `Per
NEAR-REAL-TIME
CVE-2026-115481 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-115480 - baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /bas
NEAR-REAL-TIME
CVE-2026-115480 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-115479 - baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated v
NEAR-REAL-TIME
CVE-2026-115479 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
HIGH
CVE-2026-115457 - baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, global shortcode exp
NEAR-REAL-TIME
CVE-2026-115457 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
google
Source ↗
HIGH
CVE-2026-114624 - baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area enti
NEAR-REAL-TIME
CVE-2026-114624 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-114623 - baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated use
NEAR-REAL-TIME
CVE-2026-114623 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
HIGH
CVE-2026-114622 - baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcTheme
NEAR-REAL-TIME
CVE-2026-114622 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
HIGH
CVE-2026-114621 - baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail acti
NEAR-REAL-TIME
CVE-2026-114621 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
INFORMATIONAL
CVE-2026-114357 - Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmwa
NEAR-REAL-TIME
CVE-2026-114357 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
INFORMATIONAL
CVE-2026-114356 - Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 thro
NEAR-REAL-TIME
CVE-2026-114356 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
INFORMATIONAL
CVE-2026-114355 - OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through
NEAR-REAL-TIME
CVE-2026-114355 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
INFORMATIONAL
CVE-2026-114354 - Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C
NEAR-REAL-TIME
CVE-2026-114354 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
INFORMATIONAL
CVE-2026-114353 - Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware
NEAR-REAL-TIME
CVE-2026-114353 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
HIGH
CVE-2026-10632 - A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an a
NEAR-REAL-TIME
CVE-2026-10632 · NIST NVD - National Vulnerability Database · published 2026-10-23T14:17
Source ↗
MEDIUM
CVE-2026-115754 - serialize-javascript: serialize-javascript: Cross-site scripting via unescaped function serialization
NEAR-REAL-TIME
CVE-2026-115754 · Red Hat - CVE Feed · published 2026-10-23T13:20 · correlated from 2 sources
Red Hat
Source ↗
INFORMATIONAL
CVE-2026-99087 - In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the
NEAR-REAL-TIME
CVE-2026-99087 · NIST NVD - National Vulnerability Database · published 2026-10-23T13:17
linux
Source ↗