Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-116200 - Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to
NEAR-REAL-TIME
CVE-2026-116200 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
HIGH
CVE-2026-116199 - Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the
NEAR-REAL-TIME
CVE-2026-116199 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
google
Source ↗
MEDIUM
CVE-2026-116198 - Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext i
NEAR-REAL-TIME
CVE-2026-116198 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
LOW
CVE-2026-116197 - Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller
NEAR-REAL-TIME
CVE-2026-116197 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
MEDIUM
CVE-2026-116193 - Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticat
NEAR-REAL-TIME
CVE-2026-116193 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
MEDIUM
CVE-2026-116188 - rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory acco
NEAR-REAL-TIME
CVE-2026-116188 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
INFORMATIONAL
CVE-2026-116186 - OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant authorization on inbound
NEAR-REAL-TIME
CVE-2026-116186 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
MEDIUM
CVE-2026-116185 - OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read oth
NEAR-REAL-TIME
CVE-2026-116185 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
INFORMATIONAL
CVE-2026-116184 - OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to impersonate gateways
NEAR-REAL-TIME
CVE-2026-116184 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
HIGH
CVE-2026-116183 - phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers
NEAR-REAL-TIME
CVE-2026-116183 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
MEDIUM
CVE-2026-116182 - phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches exter
NEAR-REAL-TIME
CVE-2026-116182 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
HIGH
CVE-2026-116171 - SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows ex
NEAR-REAL-TIME
CVE-2026-116171 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
MEDIUM
CVE-2026-116170 - SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injec
NEAR-REAL-TIME
CVE-2026-116170 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
MEDIUM
CVE-2026-116169 - SiYuan from 2.10.0 before 3.8.7 contains a stored cross-site scripting vulnerability that allows users with edit permiss
NEAR-REAL-TIME
CVE-2026-116169 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
MEDIUM
CVE-2026-116168 - SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAssetUploadPaths relie
NEAR-REAL-TIME
CVE-2026-116168 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
MEDIUM
CVE-2026-116167 - SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page tha
NEAR-REAL-TIME
CVE-2026-116167 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
MEDIUM
CVE-2026-116166 - SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kernel port kee
NEAR-REAL-TIME
CVE-2026-116166 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
INFORMATIONAL
CVE-2026-116165 - Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a missing authorization vulnerability on MongoDB de
NEAR-REAL-TIME
CVE-2026-116165 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
INFORMATIONAL
CVE-2026-116164 - Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3 does not reject reserved internal field names in client obje
NEAR-REAL-TIME
CVE-2026-116164 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
HIGH
CVE-2026-116163 - Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the validateSetUp,
NEAR-REAL-TIME
CVE-2026-116163 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗