Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
MEDIUM
CVE-2026-116056 - A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request_url_safe of the file app/func
NEAR-REAL-TIME
CVE-2026-116056 · NIST NVD - National Vulnerability Database · published 2026-10-25T16:16
Source ↗
MEDIUM
CVE-2026-116055 - A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the
NEAR-REAL-TIME
CVE-2026-116055 · NIST NVD - National Vulnerability Database · published 2026-10-25T15:17
Source ↗
LOW
CVE-2026-116054 - A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Mó
NEAR-REAL-TIME
CVE-2026-116054 · NIST NVD - National Vulnerability Database · published 2026-10-25T15:17
Source ↗
HIGH
CVE-2026-116211 - YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche fiel
NEAR-REAL-TIME
CVE-2026-116211 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
HIGH
CVE-2026-116208 - YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts tha
NEAR-REAL-TIME
CVE-2026-116208 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
CRITICAL
CVE-2026-116207 - YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability
NEAR-REAL-TIME
CVE-2026-116207 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
MEDIUM
CVE-2026-116206 - YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to
NEAR-REAL-TIME
CVE-2026-116206 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
MEDIUM
CVE-2026-116205 - YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers
NEAR-REAL-TIME
CVE-2026-116205 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
HIGH
CVE-2026-116204 - YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/de
NEAR-REAL-TIME
CVE-2026-116204 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
MEDIUM
CVE-2026-116203 - YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacke
NEAR-REAL-TIME
CVE-2026-116203 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
MEDIUM
CVE-2026-116202 - YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users
NEAR-REAL-TIME
CVE-2026-116202 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
HIGH
CVE-2026-116201 - Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions
NEAR-REAL-TIME
CVE-2026-116201 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
MEDIUM
CVE-2026-116200 - Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to
NEAR-REAL-TIME
CVE-2026-116200 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
HIGH
CVE-2026-116199 - Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the
NEAR-REAL-TIME
CVE-2026-116199 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
google
Source ↗
MEDIUM
CVE-2026-116198 - Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext i
NEAR-REAL-TIME
CVE-2026-116198 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
LOW
CVE-2026-116197 - Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller
NEAR-REAL-TIME
CVE-2026-116197 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:17
Source ↗
MEDIUM
CVE-2026-116193 - Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticat
NEAR-REAL-TIME
CVE-2026-116193 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
MEDIUM
CVE-2026-116188 - rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory acco
NEAR-REAL-TIME
CVE-2026-116188 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
INFORMATIONAL
CVE-2026-116186 - OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant authorization on inbound
NEAR-REAL-TIME
CVE-2026-116186 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗
MEDIUM
CVE-2026-116185 - OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read oth
NEAR-REAL-TIME
CVE-2026-116185 · NIST NVD - National Vulnerability Database · published 2026-10-25T14:16
Source ↗